{"id":2258591,"url":"https://alion.io/job/gft-technologies-cyber-forensics-analyst","title":"Cyber Forensics Analyst","company":{"id":51689,"name":"GFT Technologies","domain":"gft.com","url":"https://alion.io/company/gft-technologies","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Heredia, Costa Rica"],"countries":["CR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":69000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"EnCase","optional":false},{"name":"OneDrive","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-03T02:01:00Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-12T01:02:06Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Job description_\nAbout the Role_\nWe are seeking a Cyber Forensics Analyst with a strong emphasis on data preservation and defensible collection activities to support legal, compliance, and investigative matters. This role is primarily focused on executing and supporting eDiscovery workflows, with a core responsibility around identifying, preserving, and collecting data from a variety of enterprise sources including endpoints, servers, and cloud environments. Candidates should bring hands-on experience with industry-standard tools such as EnCase, Nuix, and Microsoft Purview eDiscovery, with the ability to perform targeted and large-scale collections while maintaining strict chain of custody and defensibility standards. While digital forensics experience is valuable, this role is centered on practical execution of eDiscovery collection and preservation processes.\nA day in this role_\nExecute defensible data preservation and collection activities across endpoints, servers, cloud platforms, and enterprise systems\nSupport end-to-end eDiscovery workflows, including identification, preservation, collection, processing, and handoff for review\nPerform targeted and bulk collections using forensic and eDiscovery tools\nManage legal hold implementations and data preservation strategies\nConduct data triage and validation to ensure completeness and defensibility of collections\nCollaborate with Legal, Compliance, HR, and Security teams to support investigations and litigation matters\nUtilize Microsoft Purview eDiscovery for case management, search, collection, and export activities\nProcess and analyze data using Nuix Workstation or equivalent platforms\nLeverage EnCase tools for forensic acquisition and analysis where required\nMaintain chain of custody and documentation for all evidence handling activities\nDevelop and maintain standard operating procedures for eDiscovery and forensic workflows\nProvide technical expertise during audits, regulatory inquiries, and internal investigations\nThe expertise requested_\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)\n3+ years of experience in digital forensics, eDiscovery, or a closely related field\nHands-on experience with at least one of the following tools: EnCase (any product suite), Nuix (any product, preferably Nuix Workstation), or Microsoft Purview eDiscovery\nExperience performing data preservation and defensible collection activities\nUnderstanding of the eDiscovery lifecycle and legal/regulatory requirements\nKnowledge of file systems, operating systems, and data structures\nStrong documentation and reporting skills\nAbility to manage multiple cases and priorities simultaneously\nDesired or nice to have expertise_\nExperience with multiple tools across EnCase, Nuix, and Microsoft Purview eDiscovery\nFamiliarity with cloud data sources including Microsoft 365, Exchange Online, OneDrive, and Teams\nExperience with forensic imaging and endpoint data acquisition\nKnowledge of scripting or automation (PowerShell, Python, etc.)\nIndustry certifications such as EnCE, GCFA, CCE, or Relativity certifications\nExperience supporting litigation, regulatory, or internal investigation matters\nOur Core values are focus to inclusion and diversity, all qualified applicants will be considered for employment and will go thru a fair recruitment process regardless of their race, religion, gender identity, sexual orientation, national origin or disability status.\nYour Journey with us begins here!!","description_format":"text","description_chars":3530,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Outsourcing & Dedicated Teams","Custom Software Development","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-11T04:30:57Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.812,"p_room":0.9,"age_days":9,"expected_fill_days":20,"reasons":["conf:5","win:mid","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/gft-technologies-cyber-forensics-analyst","json_url":"https://alion.io/job/gft-technologies-cyber-forensics-analyst.json","meta":{"generated_at":"2026-10-12T11:41:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2390,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51689},"rest":"https://alion.io/mcp/rest/get_company?id=51689"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgft-technologies-cyber-forensics-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgft-technologies-cyber-forensics-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgft-technologies-cyber-forensics-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gft-technologies-cyber-forensics-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgft-technologies-cyber-forensics-analyst"}]}