Forensic Imaging Jobs (NOW HIRING)

THIS IS NOT A CYBERSECURITY POSITION, THIS IS DIGITAL FORENSICS FOCUSED.

Position: Forensic Analyst I

Organization: LCG Discovery Experts, LLC

Experience level: Beginner / entry level

Work arrangement and location: On Location, Richmond, TX (No Remote Work)

Employment type: Full Time

POSITION SUMMARY

LCG, LLC is seeking a Forensic Analyst I to support its digital forensics and investigations work. This is an entry-level role for someone who brings sound technical foundations, careful documentation habits, curiosity, and a strong commitment to ethical evidence handling. The analyst will assist investigators, testifying experts, and litigation-support personnel with evidence intake, preservation, acquisition, processing, and lower-complexity analysis under appropriate supervision.

The role includes internal and client-facing work and is intended to provide a path for professional growth. All access to devices, accounts, systems, and data must be based on documented legal, contractual, and organizational authorization. The source description notes that limited travel and after-hours support may be required; the frequency and scheduling expectations should be confirmed before publication.

KEY RESPONSIBILITIES:

• Receive, inventory, photograph, label, track, and store devices and media while maintaining complete chain-of-custody and asset records.
• Assist with authorized preservation, collection, and forensic acquisition of data from desktops, laptops, servers, removable media, mobile devices, and cloud data sources.
• Create forensic images using approved hardware, software, and standard operating procedures; document methods, settings, exceptions, and integrity-verification results.
• Support lower-complexity forensic analysis, data processing, review, and production under the direction and quality review of experienced personnel.
• Maintain contemporaneous case notes and clear, accurate, reproducible work papers suitable for peer review and defensible reporting.
• Protect evidence integrity, confidentiality, and privacy; use the minimum access necessary and promptly escalate authorization, scope, or handling concerns.
• Safely dismantle and reassemble common computer hardware when required for media identification or acquisition.
• Communicate professionally with clients and colleagues in person, by phone, and electronically; provide timely status updates and ask for guidance when scope or instructions are unclear.
• Assist with quality checks of forensic tools and processes and follow LCG guidelines, standard operating procedures, and applicable legal requirements.
• Provide limited after-hours support and travel when required and scheduled, once those expectations are defined by LCG.

MINIMUM QUALIFICATIONS

• At least one year of practical, hands-on experience supporting digital-evidence work, including evidence intake, chain-of-custody documentation, evidence handling, forensic imaging, integrity verification, and related activities.
• Familiarity with computer hardware, mobile devices, and common operating systems, including Microsoft Windows, Linux, and Apple macOS.
• Familiarity with cloud-storage platforms, email systems, collaboration tools, and cloud-based data sources, including Microsoft 365, Google Workspace, Microsoft OneDrive, Google Drive, Dropbox, Box, and similar services.
• Ability to follow written procedures precisely, keep complete records, organize multiple tasks, and identify when to pause and seek guidance.
• Understanding of chain of custody, evidence integrity, documentation, privacy, legal authorization, and defensible forensic practices.
• Clear written and verbal communication skills, a professional client-service approach, and the ability to collaborate while also completing assigned work independently.
• Commitment to ongoing training and to handling sensitive information with discretion and sound judgment.
• Prior experience leading independent forensic investigations is not required. No specific degree or certification is required.

PREFERRED QUALIFICATIONS

• Two or more years of practical, hands-on experience supporting digital-evidence work, including evidence intake, chain-of-custody documentation, evidence handling, forensic imaging, integrity verification, and case records.
• Experience performing routine forensic acquisitions or examinations with increasing independence and limited supervision.
• Experience using forensic imaging, processing, and analysis tools such as EnCase, Exterro Forensic Toolkit (FTK), X-Ways Forensics, Magnet AXIOM, Cellebrite, VeraKey, or comparable tools.
• Hands-on experience with forensic imaging, write protection, hash-based integrity verification, evidence-management systems, or related quality-control procedures.
• Experience handling computers, mobile devices, storage media, or cloud-based evidence sources in authorized investigations, litigation support, incident response, or similar work.
• Experience working with clients or stakeholders in an environment where accuracy, confidentiality, documentation, and timely communication are essential.
• Demonstrated mechanical aptitude with desktops, laptops, storage devices, or related computer hardware.
• Relevant digital-forensics education, training, or certifications that supplement practical experience.
• No specific certification is required unless separately confirmed by LCG.

TECHNICAL SKILLS AND KNOWLEDGE

• Basic understanding of the digital-evidence lifecycle: identification, preservation, collection, acquisition, examination, analysis, reporting, retention, and disposition.
• Awareness of forensic imaging principles, write protection, hash-based integrity verification, repeatable methods, and validation or quality-control checks.
• Working familiarity with Windows, Linux, macOS, mobile devices, storage media, and common computer components.
• Ability to learn approved third-party forensic hardware and software; no vendor-specific tool is listed as mandatory in the source description.
• Ability to document what was authorized, what was collected, what actions were taken, what results were observed, and any limitations or deviations.
• Understanding that credentials, devices, accounts, and data may be accessed only within documented authorization and assigned scope.