Digital Forensics Engineer

Santa Clara Valley (Cupertino), California, United States
Corporate Functions


Weekly Hours: 40
Role Number:200161374
Apple is seeking an experienced digital forensics professional to join its growing Digital Forensics Investigations team. The DFI team provides investigative support to complex internal investigations and security incidents.

Key Qualifications

  • Minimum 5 years of experience in digital forensic investigations
  • Proven expertise in filesystem analysis in one or more OS: Mac, Windows, Linux/Unix
  • Experience with industry standard Digital Forensics methodologies, including evidence handling, chain of custody procedures, and commonly used forensics toolsets
  • Attention to detail, deep personal integrity, and high concern for data accuracy
  • Strong verbal and written communication (History of writing reports, expert opinions, or providing expert testimony experience a plus)
  • An investigative mind to be able to learn and discover how unfamiliar technology works
  • Dependable collaborator who works with peers in a team-oriented environment
  • Ability to switch mindset and wear many hats (e.g investigator, interviewer, trouble-shooter) without impacting performance


As part of Apple's Digital Forensics Team, you will use your skillset to: conduct forensic analysis in sensitive cases, determine root cause in security incidents and shape security measures within Apple, report on and present findings to investigative business partners, develop solutions to increase efficiency in technical processes, and conduct research.

Education & Experience

Degree in Computer Science, Digital Forensics, or relevant work experience in forensics and/or investigations. DFIR certifications are a plus

Additional Requirements

  • Nice to Haves:
  • Incident Response and network analysis experience
  • Experience with enterprise log aggregation platforms
  • Experience conducting digital forensics in a cloud environment
  • Prior law enforcement experience
  • Scripting experience (Python and Bash)