Sr Principal Digital Forensics Engineer

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Cadence’s Information Security team is seeking a Sr Principal Digital Forensics and Data Protection Engineer. As a member of the Information Security team, this role:

• Proactively defines, reviews, and implements internal procedures to identify, handle, collect, preserve, analyze, and document findings in electronic evidence.

• Serves as an integral member of Cadence’s Information Security Incident Response Team and monitors, identifies, investigates, and analyzes response activities related to data related cybersecurity incidents within Cadence and its subsidiaries.

• Must be able to communicate effectively at both a technical and non-technical and may interface with external entities including law enforcement, federal intelligence, and other government agencies.

• Liaison with legal and HR on investigations and computer forensics.

Key Deliverables and Responsibilities (include but are not limited to the following):

• Defines, implements, and executes internal procedures to identify, manage, collect, preserve, analyze, and document findings in electronic evidence.

• Research, evaluate, develop, and implement digital-forensics and data-protection security solutions, and standards, following industry best practices.

• Ensure that current and planned digital-forensics and data-protection solutions are compatible with the company's business needs, processes, and strategic objectives.

• Operate and maintain the production environment toolsets and services. Responsible for gathering, recovering, analyzing, and reporting computer-based electronic evidence related to cybersecurity incidents.

• Clearly communicate and present evidence findings from information technology and other electronic media related to cybersecurity incidents.

• Work with the other IT organizations to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments.

• Provide technical expertise and assistance to other Information Security and Business groups.

• Responsible for providing reports and feedback to business stakeholders.

QUALIFICATIONS AND SPECIAL SKILLS REQUIRED:

• At least 6-10 years of experience with Digital Forensic and Data Protection processes and solutions.

• Strong knowledge of Digital Forensics and Data Protection methods with general understanding of current security vulnerabilities, tactics, techniques, and procedures, as well as a dedicated and self-driven desire to research current and emerging data breach trends in the information security landscape.

• Good working knowledge in scripting language, for example – Python, PowerShell, etc.

• Conceptual and practical understanding of IT Infrastructure designs, technologies, products, and services. This should include knowledge of network communication protocols, operating systems, databases, electronic messaging, mobile, cloud, and other technologies.

• In-depth knowledge of digital forensic concepts such as:

  • Digital Evidence Acquisition

  • Digital Evidence Handling/Preservation

  • Litigation Holds

  • Digital Forensic Analysis

  • Forensic Reporting

• In-depth knowledge of security concepts such as:

  • OS Filesystem Analysis (Windows, Mac, Linux)

  • Memory Analysis

  • Email Structure Analysis

  • Packet Capture Analysis

  • Vulnerability Scanning

  • Data Loss Prevention

  • Endpoint Security

  • Data Encryption

  • Malware/Advanced Persistent Threats

  • File Integrity

  • Log Management/SIEM

  • Mobile Devices

• Bachelor’s degree preferred or equivalent combination of education and relevant experience.

• Excellent organizational, time management, and communication skills.

• Able to work independently and/or collaboratively to creatively solve complex technical problems.

• Able to provide leadership, guidance, and training to others.

• Able to provide accurate estimates of timeframes and cost estimates necessary to complete potential projects and develop milestones and project implementation plans.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)

• GIAC Certified Forensic Examiner (GCFE)

• EnCase Certified Examiner (EnCE)

• EnCase Certified eDiscovery Practitioner (EnCEP)

• Certified Forensic Security Responder (CFSR)