Digital Forensics & eDiscovery Manager

Company Overview

KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the world’s leading technology providers to accelerate the delivery of tomorrow’s electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Group/Division

The Legal Compliance Organization (LCO) team headquartered in Milpitas, CA and second headquarters in Ann Arbor, MI provides legal guidance to further KLA’s strategic objectives and protect and preserve the legal, ethical and financial integrity and reputation of the Company. With specific expertise in the areas of corporate law, commercial law, employment law, and intellectual property; the LCO offers strategic legal counsel that is informed by a clear understanding of the company’s business objectives and expertise in the laws and regulations relevant to the business worldwide.

Job Description/Preferred Qualifications

As a member of the Legal and Compliance Organization (“LCO”), you will lead KLA’s digital forensics, investigations support, ESI preservation, eDiscovery, information governance, and forensic advisory functions.

You will serve as the primary escalation point and subject-matter lead for digital forensic investigations, legal holds, eDiscovery collections and review, insider risk support, mobile and remote collections, cloud and collaboration-platform evidence, AI-related evidence, and cross-functional matters involving Legal, Compliance, Human Resources, Cybersecurity, IT, Intellectual Property, and business stakeholders.

The role requires a hands-on leader who can mentor a global team, apply forensic judgment to new technologies, and translate complex data into accurate, defensible, timely, and business-relevant findings.

Responsibilities:

• Identify, investigate, preserve, collect, analyze, and reduce risk by performing the following:

• Lead, mentor, and develop a global digital forensics and eDiscovery team, including internal analysts, contractors, external vendors, and regional support partners.

• Oversee defensible forensic analysis, evidence preservation, data collection, review support, reporting, and evidence interpretation for investigations, legal matters, business functions, and global evidence management activities.

• Analyze evidence from endpoint DLP, Microsoft 365 Purview, Teams, Outlook, OneDrive, SharePoint, SIEM/security logs, Intune/MDM, mobile devices, network/cloud artifacts, OSINT sources, and AI prompts, outputs, and usage logs where available.

• Manage forensic imaging, remote endpoint collections, targeted mobile collections, evidence intake, release, disposition, and chain-of-custody processes in accordance with applicable law, policy, and legal hold obligations.

• Improve eDiscovery and ESI preservation processes, including legal holds, custodian identification, data collection, review set preparation, reconciliation, release workflows, and defensible retention or disposition decisions.

• Develop defensible approaches for AI-related evidence, including prompts, inputs, outputs, usage logs, model-assisted summaries, and AI-generated or AI-modified content, with appropriate human validation and privilege, privacy, security, and records-management controls.

• Partner with Cybersecurity and IT on incident response, insider risk, monitoring, logging, forensic readiness, threat-related investigations, and post-incident evidence preservation.

• Support LCO special projects, including information governance, data mapping, records and hard-drive disposition, communication monitoring governance, fraud and impersonation takedowns, dawn raid readiness, policy initiatives, training, dashboards, and workflow automation.​

Desired

• Experience drafting forensic reports, declarations, certifications, affidavits, witness statements, or similar materials and explaining findings in litigation, regulatory,