Digital Forensics Analyst

Agilent inspires and supports discoveries that advance the quality of life. We provide life science, diagnostic and applied market laboratories worldwide with instruments, services, consumables, applications and expertise. Agilent enables customers to gain the answers and insights they seek -- so they can do what they do best: improve the world around us. Information about Agilent is available at www.agilent.com 

• Performs authorized forensic acquisition, preservation, and targeted or full forensic collection from approved data sources, including endpoints, servers, email, cloud, collaboration platforms, logs, and other corporate systems.

• Conducts forensic review and analysis of collected data to identify relevant evidence, user activity, timelines, system artifacts, and supporting facts for investigation findings.

• Supports investigations involving insider risk, employee misconduct, data exfiltration, unauthorized access, intellectual property concerns, cybersecurity incidents, and other matters.

• Provides advanced forensic support, where required, for malware, registry, memory, persistence, endpoint, and incident response investigations, including recommendations on appropriate collection and analysis approaches.

• Monitors security events and performs security investigations and computer forensic analysis to identify potential source of data, application, computer, network and/or internet security problems and breaches and assists in the development of countermeasures.

• Supports eDiscovery activities, including identification, preservation, collection, processing, and preparation of electronically stored information for review by Legal and other authorized stakeholders.

• Maintains complete case documentation, evidence tracking, chain-of-custody records, investigation notes, status updates, technical reports, executive summaries, and findings presentations as required.

• Researches current tools, techniques and industry standard trends in emerging security technologies or architectures.

• May develop security policies, awareness communication and/or training programs.

• Bachelor's or Master's Degree or equivalent.

• Post-graduate, certification and/or license may be required.

• Typically, at least 4+ years relevant experience for entry into this level.