Engineer III - Digital Forensics & Investigations

The Engineer III, Digital Forensics, is a senior technical role within the Cyber Defense organization responsible for conducting complex forensic investigations across endpoints, servers, cloud platforms, and mobile devices. This role serves as an escalation point for junior analysts, ensuring digital evidence is collected, preserved, and analyzed in a defensible manner. The Engineer III will play a critical role in supporting incident response, insider threat investigations, and legal or HR inquiries while collaborating with global stakeholders to mature forensic capabilities across the enterprise.

• Lead digital forensic investigations involving cyber incidents, insider threats, fraud, or policy violations.

• Perform advanced forensic analysis on endpoints, servers, cloud platforms, and mobile devices to identify malicious activity, data exfiltration, or system compromise.

• Ensure proper evidence collection, preservation, documentation, and chain of custody in compliance with legal and regulatory standards.

• Develop and refine forensic playbooks, procedures, and workflows for global use.

• Partner with incident response, insider threat, HR, Legal, and Corporate Security teams to support sensitive investigations.

• Analyze malware, artifacts, and logs to determine attack vectors, timelines, and root causes.

• Act as a technical escalation point for Engineer I/II forensic analysts.

• Provide clear written reports and investigative summaries for leadership, legal, and non-technical audiences.

• Mentor and train junior forensic engineers on investigative techniques, tools, and evidence handling.

• Stay current on emerging forensic tools, technologies, and best practices to continuously improve program maturity.

• Bachelor's degree in Cybersecurity, Digital Forensics, Computer Science, or equivalent work experience; Master's degree preferred.

• Strong knowledge of forensic methodologies, evidence handling, and investigative processes.

• Familiarity with industry frameworks such as NIST, ISO 27037, and SANS best practices.

• EnCase Certified Examiner (EnCE)

• Certified Computer Examiner (CCE)

• GIAC Certified Forensic Analyst (GCFA)

• GIAC Advanced Smartphone Forensics (GASF)

• Certified Information Systems Security Professional (CISSP)

• 5-7 years of progressive experience in cybersecurity, with at least 3 years focused on digital forensics.

• Hands-on experience with forensic tools such as EnCase, FTK, X-Ways, Cellebrite, or Magnet Axiom.

• Demonstrated expertise in forensic investigations supporting cyber incidents, insider threats, or HR/Legal matters.

• Proven ability to handle sensitive investigations and maintain confidentiality.

• Strong communication skills, with the ability to present technical findings to technical and non-technical stakeholders.

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned