Digital Forensics Analyst, Career

Job Posting Date: May 19, 2017
Requisition #: 54134571-E01
Job Category: Information Technology
Job Level: Individual Contributor
Employment Type: Administrative
Business Unit: Information Technology and Supply Chain
Schedule: Full-time
City: Concord

Based in San Francisco, Pacific Gas and Electric Company, a subsidiary of PG&E Corporation (NYSE:PCG), is one of the largest combined natural gas and electric utilities in the United States. And wedeliver some of the nation’s cleanest energy to our customers in Northern and Central California. For PG&E, ‘Together, Building a Better California’ is not just a slogan. It’s the very core of our mission and the scale by which we measure our success. We knowthat the nearly 16 million people who do business with our company count on our more than 24,000 employees for far more than the delivery of utility services. They, along with every citizen of the state we call home, also expect PG&E to help improve theirquality of life, the economic vitality of their communities, and the prospect for a better future fueled by clean, safe, reliable and affordable energy.

Pacific Gas and Electric Company is an Affirmative Action and Equal Employment Opportunity employerthat actively pursues and hires a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, sex, age, religion, physical or mental disability status, medical condition, protectedveteran status, marital status, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information or any other factor that is not related to the job.

Department Overview

Pacific Gas and Electric Company, a subsidiary ofPG&E Corporation (NYSE:PCG), is one of the largest combined natural gas and electric utilities in the United States. Based in San Francisco, with 23,000 employees, the company delivers some of the nation’s cleanest energy to 16 million people in Northern andCentral California. Pacific Gas and Electric Company is an AA/EEO employer that actively pursues and hires a diverse workforce.

The Information Security function is led by PG&E’s Vice President – Chief Information Security Officer and is responsiblefor cybersecurity and risk management across the organization.

The Security Intelligence and Operations Center (SIOC) is responsible for ensuring that PG&E proactively identifies and assesses threats to its network and data, monitors its network formalicious activity, investigates intrusions and other relevant events, and has a sophisticated and detailed understanding of the evolving threat landscape.

Position Summary

This is a challenging and fast paced position in PG&E’s SecurityIntelligence and Operations Center (SIOC) which is responsible for providing eDiscovery and Digital Forensic services to key internal business partners. The SIOC is a critical team within PG&E’s broader Information Security team which is led by PG&E’s VicePresident – Chief Information Security Officer.

This position is for: Monday – Friday Day Shift. However, occasional afterhours and weekend work may be necessary.


* Bachelor’s degree or equivalent relatedprofessional experience
* 4 years of technical experience to include two years of experience in cybersecurity and/or digital forensics/digital investigations
* Certified Information Systems Security Professional certification (CISSP) or CertifiedComputer Examiner (CCE) certification or Certified Computer Forensics Examiner (CCFE), OR GIAC Certified Forensic Examiner (GCFE) certification or ability to obtain in the first 12 months
* Working knowledge of digital forensic investigation techniques (i.e.EnCase Enterprise, EnCase eDiscovery, Tableau Write-blockers and Imagers, and FTK suite)

* Working knowledge of diverse operating systems, and systems or application administration
* Working knowledge of commercial forensic tools
* Utility Industry experience
* eDiscovery experience
* Experience with scripting in Perl/Python/PowerShell/BASH/Batch
* Experience with both desktop-based and server-based forensics
* Strong sense of professionalism and ethics.
* Actswith integrity and communicates honestly and openly
* Ability to build rapport and cooperation among teams and internal stakeholders
* Respects others and demonstrates fair treatment to all
* Methodical and detail oriented
* Self motivated
*Actively seeks to enhance the group through the sharing of knowledge


* Perform eDiscovery collection, processing, and deliver in support of Law department matters
* Preserve and analyze data from electronic data sources, includinglaptop and desktop computers, servers, and mobile devices according to the company’s policies and practices
* Conducts examinations of digital evidence and assists with the preparation of electronic evidence for litigation
* Assists with Data LossDetection/Prevention events
* Ensures that electronic evidence is collected in a manner that maintains its integrity and a proper chain of custody
* Researches and maintains proficiency in tools, techniques, and trends in eDiscovery and digital forensicanalysis information
* Utilizes forensic techniques and forensic toolsets such as EnCase Enterprise, EnCase eDiscovery, Tableau Write-blockers and Imagers, Cellebrite and other commercial and open source toolsets
* Produce high quality written reports,documenting case details, developments and outcome
* Present complex technical matters clearly and concisely
* Gather details from the file system, artifacts, and Registry or kernel of a Windows, MAC iOS or Linux operating system
* Establish andmaintain excellent working relationships/partnerships with key law and investigation partners, the cybersecurity and infrastructure support teams throughout the Information Technology organization, as well as business units


Before You Apply

Thank you for your interest in joining PG&E. Before you apply online, please note:

  • The job search function is offline for maintenance every Saturday night, from 9:00pm to 9:30pm (Pacific).
  • This site works best if you have one of the following browsers installed: Internet Explorer 9-11; Firefox 45; Safari 9.0 (on Mac OS 10.11); or Chrome 54.
  • This site does not support mobile browsers.

Continue to Apply