Note: The job is a remote job and is open to candidates in USA. Tower Legal Solutions is seeking a Senior Analyst in Investigations & Forensics to lead complex digital forensic investigations. This role involves supporting various teams by investigating insider threats and building AI-powered investigative workflows and tools.
Responsibilities
- Lead digital forensic investigations across endpoints, cloud platforms, email, identity systems, and SaaS environments
- Conduct forensic collection, imaging, analysis, and evidence preservation while maintaining chain of custody
- Investigate insider threats, data exfiltration, intellectual property theft, fraud, and employee misconduct
- Support high-severity security incidents through forensic analysis, attribution, and timeline reconstruction
- Execute eDiscovery collections and support legal hold, litigation, and regulatory matters
- Analyze data from CrowdStrike Falcon, Microsoft 365, Azure AD, Splunk, Chronicle, Okta, Zscaler, and related platforms
- Develop and enhance forensic tooling, detection workflows, and AI-assisted investigative processes
- Prepare executive-level investigative reports suitable for legal, HR, and regulatory audiences
Skills
- 7+ years of digital forensics, cybersecurity investigations, or related experience
- Experience investigating insider threats, data exfiltration, employee misconduct, and security incidents
- Expertise with forensic tools such as Magnet AXIOM Cyber, Cellebrite Endpoint, Google Security Operations, Collector/Investigator, and similar platforms
- Strong knowledge of endpoint forensics (Windows and macOS), Microsoft 365 forensics, cloud investigations, and EDR technologies
- Experience with CrowdStrike Falcon, Azure AD, Exchange Online, Purview, and security log analysis
- Familiarity with Chronicle (YARA-L), Splunk, and device management platforms such as Intune, JAMF, or SCCM
- Experience supporting eDiscovery, legal holds, and electronic evidence collection
- Strong report writing skills and ability to produce legally defensible findings
- Hands-on experience using AI tools such as Microsoft Copilot or Claude in investigative or analytical workflows
- Ability to build prompt frameworks, automation workflows, or AI-assisted analysis processes
- Experience applying AI to forensic investigations, log analysis, timeline creation, or report generation
- Experience supporting Legal, HR, Ethics, or Compliance functions
- Incident response experience
- Familiarity with Zscaler and cloud security telemetry
- Relevant certifications such as GCFA, GCFE, EnCE, CFCE, or CISSP
Company Overview