Assoc Investigator, Digital Forensics

As America's Un-carrier, T-Mobile US, Inc. (NASDAQ: TMUS) is redefining the way consumers and businesses buy wireless services through leading product and service innovation. The company's advanced nationwide 4G and 4G LTE network delivers outstanding wireless experiences for customers who are unwilling to compromise on quality and value. Based in Bellevue, Washington, T-Mobile US provides services through its subsidiaries and operates its flagship brands, T-Mobile and MetroPCS. For more information, please visit http://www.t-mobile.comAssoc Investigator, Digital Forensics- This position is designed to provide advanced capabilities in digital forensics investigations and digital forensics support and services.2+ years of investigative/forensics experience in the public and/or private sector or equivalent experience. Minimum of 24 months at T-Mobile USA in Analyst, Digital Forensics role unless otherwise approved by Director.

Proven ability to maintain the integrity of confidential information, including subscriber data, sensitive financials, intellectual property and other proprietary or restricted information.

Solid, foundational knowledge of network architecture, e-mail based systems, and security risks.

Demonstrate Company Values. Must conduct all business with executive and business maturity

Experience in computer forensic examinations and chain of custody procedures required

Proven ability to learn & utilize forensic tools such as EnCase, Forensic Toolkit (FTK), X-Ways, Paraben, open source technologies and a variety of other software and applications.

Experience in handling investigations and/or security events involving computers or digital evidence required.

Willing to complete industry accepted investigative interview training and work towards obtaining experience in a variety of interview settings.

Ability to organize & appropriately prioritize multiple, ongoing tasks via efficient time management & forecasting. Project management skills a plus.

Demonstrate ability to manage tasks and respond with professionalism to new situations and complex issues in a fast paced environment

Ability to work well with a variety of skill levels across a large number of diverse internal groups, teams, divisions and cultures.

Ability to solve complex problems for self and team members when appropriate or required.

Ability to undertake static malware analysis and basic dynamic malware analysis in the context of a potential compromise/breach investigation.

Ability to handle basic correlation & analysis of disparate logging from a variety of sources including Splunk, SIEM, Intrusion Detection systems and other data points.

Foundational understanding of mobile forensics, including exposure to Cellebrite, Mobile Phone Examiner and other industry accepted tools.

Basic knowledge of State & Federal regulatory requirements involving PCI, PII and CPNI.

Solid knowledge of Windows OS and familiarity of and ability to work within other OS, including Linux, Unix, MacOS, Android.

Strong understanding of Electronic Discovery Reference Model (EDRM) plus related Electronically Stored Information (ESI) handling requirements to enable capability of leading a variety of eDiscovery collections.

Hard drive data recovery exposure, experience with DeepSpar Disk Imager or comparable tools preferred.

Understand how to use regular expressions to search for and reduce data.

Demonstrated ability to distill technical information into verbal and written communications for audiences with varying levels of understanding.

Basic familiarity with network forensics suites, e.g. WireShark, NetWitness or others.

Ability to plan, organize and prioritize tasks to complete independently; Ability to deliver results under pressure and meet tight timelines.

Research, maintain and enhance existing analysis tools and techniques used in eDiscovery, forensics, and basic malware analysis.

Solid knowledge of various file systems including NTFS, FAT, HFS+ and others.

Knowledge of core Internet protocols (TCP/IP, DNS, SMTP, HTTP etc.)

Well-versed in electronic evidence collection & preservation principles.

May be responsible for managing forensic examinations through the entire lifecycle (case planning, intake, acquisition, examination, presentation & disposition).

Maintains Continuing Professional Education (CPE) standards for any certifications currently held.

Provide baseline technical, forensic guidance to investigators, attorneys, and other business partners with the collection, organization, and preparation of data for review and analysis in legal matters, regulatory filings, and investigations.

Provide digital forensics support to Corporate Investigations team on a variety of complex investigations related to Privacy, Financial Fraud, Brand Protection, Ethics & Compliance and other matters

Handles complex, technical investigations related to every aspect of forensic data to include: the collection and preservation of stored media; detection and recovery of deleted, fragmented and corrupted data; e-mail analysis/tracing; password cracking and retrieval; and documentation of findings in a manner suitable for courtroom presentation

Assist with the preparation of digital forensics consultative knowledge, education and awareness training on technological and digital forensics concepts for other business partners and multiple levels of management.

Assist on special projects with an enterprise-wide impact requiring guidance and direction from a forensics/investigation perspective.

Provide expert testimony regarding theories, principles, and practices regarding digital forensics

Also responsible for other Duties/Projects as assigned by business management as needed

At least 18 years of age. Legally authorized to work in the United States. High School Diploma or GED. Pre-employment background screen. BA in Digital Forensics, Computer Science or related discipline is preferred, or a combination of work experience and education can be considered.

One or more of the following Industry recognized certification(s) such as- CCE, CFCE, GCFA, EnCE, CSFA or ACE

Accreditation/membership in a professional forensics, security or investigations organization

May be required to travel, on short notice, to various locations in support of the Corporate Investigations team.

  • Work may involve non-traditional working hours. Ability to respond quickly to high-impact/urgent matters which may require time spent in evenings or on weekends. May have exposure to offensive and/or sensitive material.

T-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination or harassment based upon any of these factors is wholly inconsistent with our Company values and will not be tolerated. Furthermore, such discrimination or harassment may violate federal, state, or local law.

Meet Some of T-Mobile's Employees

Hendrik P.

Radio Frequency Engineer

Hendrik upgrades and deploys T-Mobile technologies. He works with contractors to seamlessly implement the latest and most efficient customer-friendly technology specifications across various sites.

Luis A.

Human Resources Business Partner

Luis supports T-Mobile’s frontline retail business in the Southern U.S. region. He manages and develops successful HR organizational policies that let T-Mobile districts shine.

Back to top