Forensic Analyst

Job Description

KLDiscovery brings clarity, trust, and meaning to data for clients navigating legal matters worldwide. Our global Forensics team collects, preserves, and analyzes the data that legal matters depend on, and it runs around the clock across the US, EMEA, and APAC

As a Forensic Analyst based in India, you join the India-based group of that global team and work US Central hours, including weekends, so our clients have forensic coverage when they need it. You start with high-volume, well-defined work: cloud data collections, mobile device report exports, chain of custody documentation, and ticket triage, all under structured training from the US team. As your skills and certifications build, your ownership grows, from supervised tickets to independent handling of assigned ticket types to standalone weekend coverage. This is a role for someone who wants to build a career in digital forensics inside a global practice, with a clear path and real responsibility early.

What You'll Be Doing

• Collections and Evidence Handling
• Process cloud data collections from Microsoft 365, Google Workspace, and similar sources following KLD Standard Operating Procedures.
• Generate mobile device report exports from forensic tool outputs (Cellebrite, Oxygen Forensics, Magnet AXIOM, or equivalent).
• Maintain chain of custody documentation and evidence handling logs to the KLD standard, and keep case records and ticket notes complete and current.
• Travel within India for onsite data collection or evidence and media handover when a matter requires it.

Ticket Triage and Weekend Coverage

• Triage, tag, and route incoming forensics tickets in KLD's work management system, and claim and action Tier 1 and Tier 2 requests within SLA, with quality control requests taking priority over new tickets of the same tier.
• Monitor the collections and escalation channels during your shift, and alert the on-duty Weekend Coverage Manager to priority requests.
• Execute time-dependent, scheduled, and prioritized cloud and remote collections during weekend coverage windows.
• Escalate anything client-facing, legally sensitive, or outside a defined SOP to the US team, and provide clear handoff notes at the end of every shift so service continues without interruption.
• Learning, Certification, and Growth
• Complete structured training, shadowing, and certification milestones set by the US team, and work independently on each ticket type once certified.
• Contribute to and maintain the internal knowledge base and SOP documentation as you learn.
• Build toward standalone coverage of routine ticket types and, over time, broader collection and analysis work as trust and skills grow.
• Lead with the four values. Client is Always in the Room. Own the Outcome. Better Every Day. Deliver Results Together.
• What You Should Already Have
• Bachelor's degree in computer science, information technology, cybersecurity, or a related field, or equivalent practical experience.
• 1 to 3 years in digital forensics, IT operations, a helpdesk or ticketing environment, or a similar structured technical role. Strong aptitude and attention to detail can substitute for direct forensics experience.
• Exposure to forensic tools (Cellebrite, Magnet AXIOM, EnCase, FTK, Oxygen Forensics, X-Ways, or similar) is a plus, not a requirement. Training is provided.
• Basic scripting (Python, PowerShell, or Bash) is a plus, not a requirement.
• Strong written English for documentation and ticket notes. Fluent spoken English for daily work with US, UK, and APAC colleagues. Client-facing communication is required at the start.
• Comfortable with a sustained US-aligned night schedule that includes Saturday and Sunday, and able to work independently once certified while following escalation protocols.
• Able and willing to travel within India for onsite collection or media handover as required.
• For the typical APAC Forensic Analyst role, expect 1-2 international trips per year (generally onsite), so a valid passport is recommended.
• Preferred, not required: prior experience with a US-based employer, a background in legal, banking, IT infrastructure, IT consulting, or programming, or study or work experience outside India.

Work Environment

• Hours: US Central business hours, roughly 7:30 PM to 3:30 AM IST, so you overlap live with your US trainers and the US team.
• Schedule: during the first three to six months, Monday to Friday. Once certified on your assigned ticket types, a five-day week that includes Saturday and Sunday (Thursday to Monday or Friday to Tuesday), with two consecutive weekdays off. Transitions are staggered so you move with support, not all at once.
• Weekend coverage: the weekend is defined as Friday 5 PM to Sunday 5 PM Central. You are the dedicated forensics coverage in that window for routine and priority ticket types, with the US Weekend Coverage Manager on call for escalations.
• Hybrid from Chennai or fully remote from a major Indian city, with company-provided equipment, VPN, high-speed stable/reliable internet and tool access.
• This is a demanding schedule by design. Rotation and rest planning, swap flexibility with teammates, and a shift differential are part of how the role is built.

Benefits & Perks

• A place on a global forensics team, with structured training and certification from US-based practitioners.
• Market-competitive compensation with a shift differential for US-aligned and weekend hours.
• Health and insurance benefits per KLD India policy.
• Paid time off and statutory benefits.
• A defined growth path from supervised ticket work to independent ownership and broader forensic scope, with quarterly performance reviews.

Who We Are

KLDiscovery provides technology-enabled services and software to help law firms, corporations, and government agencies solve complex data challenges. We deliver forensic collection and investigation, early case assessment, data processing, hosting and review technology, and managed document review to clients around the world, and our Ontrack business delivers data recovery and data management.

KLDiscovery is an Equal Opportunity Employer. Job descriptions are not intended to be all-inclusive lists of responsibilities, requirements, or working conditions. Management reserves the right to modify, add, or remove duties as business needs require.