Our client, a pioneering legal services startup founded by industry veterans, is seeking a highly experienced Senior Digital Forensics and Incident Response (DFIR) Examiner to join their Tampa-based forensic operations team. This role offers a unique opportunity to work at the forefront of digital evidence collection, handling complex cases involving mass arbitration, corporate investigations, and cyber incident response. The successful candidate will play a pivotal role in executing mobile device and endpoint forensic collections within a dedicated forensic laboratory environment, ensuring the delivery of legally defensible, high-quality evidence.

This position is an excellent opportunity for a seasoned forensic expert looking to contribute to high-stakes legal proceedings. The organization values rigorous adherence to legal and professional standards, providing an environment for growth alongside a reputation for technical excellence and integrity. Candidates will have the chance to work with advanced forensic tools, contribute to complex cases, and support global investigations in a collaborative, mission-driven setting.

Key Responsibilities:

• Conduct targeted forensic collections of mobile devices (iOS and Android), including utilizing multiple collection methodologies such as software installers, Kiosks, and shipped kits, ensuring chain-of-custody integrity and hash verification.
• Perform physical and logical imaging of endpoints (Windows and macOS) and forensic acquisitions of cloud-based and enterprise platforms, including Microsoft 365, Google Workspace, and Slack.
• Maintain comprehensive chain-of-custody documentation, securely manage evidence, and coordinate evidence transfer and storage in compliance with security protocols.
• Operate and configure forensic platforms and tools, including CrossCopy Enterprise, FTK Imager, Autopsy, and Velociraptor, supporting live incident response and forensic workflows.
• Prepare detailed forensic collection reports, declare examiner certifications, and communicate findings clearly to legal teams and external counsel while ensuring legal defensibility and accuracy of all documentation.
• Support the laboratory’s operational readiness by maintaining secure evidence storage, monitoring consumables, and supporting technology updates and platform integrity.
• Collaborate with internal teams and external stakeholders to optimize forensic processes, resolve technical issues, and support quality assurance programs.

Qualifications:

• 5+ years of hands-on digital forensic experience, ideally within civil litigation, corporate investigations, or law enforcement.
• Proven expertise in mobile device forensic collections, including iOS and Android, with familiarity of collection protocols, constraints, and tools.
• Hands-on experience with forensic imaging, ESI (Electronically Stored Information) collection, and cloud data acquisition.
• Strong knowledge of forensic tools such as CrossCopy Enterprise, FTK Imager, Autopsy, and Velociraptor, as well as evidence management best practices.
• Certifications such as EnCE (EnCase Certified Examiner) or GCFE (GIAC Certified Forensic Examiner) are required.

Preferred Qualifications:

• Experience supporting high-volume collection programs and managing logistics for shipped forensic kits.
• Prior work in managed legal services, eDiscovery, or ALSP (Alternative Legal Service Provider) environments.
• Advanced mobile forensic certifications (e.g., Cellebrite Certified Mobile Examiner).
• Familiarity with NAS management, encryption protocols, and cloud storage services.