Digital Forensics Analyst

Pacific Gas and Electric Company, incorporated in California in 1905, is one of the largest combination natural gas and electric utilities in the United States. Based in San Francisco, the company is a subsidiary of PG&E Corporation.

This is a challenging and fast paced position in PG&E’sSecurity Intelligence and Operations Center (SIOC) which is responsible for providing eDiscovery and Digital Forensic services to key internal business partners. The SIOC is a critical team within PG&E’s broader Information Security team which is led byPG&E’s Vice President - Chief Information Security Officer.

* Perform eDiscovery collection, processing, and deliver in support of Law department matters * Preserve and analyze data from electronic data sources, including laptop and desktop computers, servers, and mobiledevices according to the company’s policies and practices * Conducts examinations of digital evidence and assists with the preparation of electronic evidence for litigation * Assists with Data Loss Detection/Prevention events * Ensures that electronicevidence is collected in a manner that maintains its integrity and a proper chain of custody * Researches and maintains proficiency in tools, techniques, and trends in eDiscovery and digital forensic analysis information * Utilizes forensic techniques andforensic toolsets such as EnCase Enterprise, EnCase eDiscovery, Tableau Write-blockers and Imagers, Cellebrite and other commercial and open source toolsets * Produce high quality written reports, documenting case details, developments and outcome * Present complex technical matters clearly and concisely * Gather details from the file system, artifacts, and Registry or kernel of a Windows, MAC iOS or Linux operating system * Establish and maintain excellent working relationships/partnerships with keylaw and investigation partners, the cybersecurity and infrastructure support teams throughout the Information Technology organization, as well as business units

* Bachelors or training inComputer Science, Security, or equivalent professional experience * Working knowledge of EnCase Enterprise and EnCase eDiscovery * 4 years of IT experience with 2 years focused on cybersecurity; or equivalent professional experience * Workingknowledge of Microsoft Windows operating systems * Strong customer service skills and decision-making skills * Strong organizational skills and ability to prioritize * Complex application management/support and training * Managing large projectsor events **Desired:** * Certified Computer Examiner (CCE) certification OR Certified Computer Forensics Examiner (CCFE), OR GIAC Certified Forensic Examiner (GCFE) certification or ability to obtain in the first 12 months * Utility Industryexperience * eDiscovery or Digital Forensic analyst knowledge or experience **Additional Qualifications/Knowledge/Skills/Abilities:** * Working knowledge of eDiscovery and digital forensic investigation techniques * Working knowledge of diverseoperating systems, and systems or application administration * Working knowledge of commercial forensic tools * Experience with the following forensic techniques forensic toolsets: (EnCase Enterprise, EnCase eDiscovery, Tableau Write-blockers and Imagers,and FTK suite) * Ability to independently initiate, manage, execute, and report tasks, as identified * Ability to prepare and present briefings and training * Excellent problem solving, critical thinking, and analytical skills - ability tode-construct problems * Strong customer service skills and decision-making skills * Experience with scripting in Perl/Python/PowerShell/BASH/Batch Experience with both desktop-based and server-based forensics