Job Description

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

Seeking a Digital Forensics Expert Witness with proven experience providing testimony in litigation, including class action defense matters. This role focuses on delivering defensible forensic analysis, authoring expert reports, and presenting complex technical findings in legal proceedings. The position requires strong report writing capabilities, experience working with counsel, and the ability to translate technical evidence into clear, courtroom-ready narratives.

Key Responsibilities:

Expert Testimony:
• Provide sworn testimony in depositions, hearings, arbitrations, and trial settings.
• Serve as a testifying expert in matters involving digital forensics, incident response, data access, and cybersecurity events.
• Support counsel in developing technical strategies aligned to litigation objectives.
Forensic Analysis:
• Conduct and oversee digital forensic investigations across endpoints, cloud platforms, email systems, and enterprise environments.
• Analyze evidence related to unauthorized access, data exposure, insider activity, and security incidents.
• Develop defensible findings aligned to evidentiary standards.
Report Writing:
• Author expert reports, rebuttal reports, and declarations suitable for court submission.
• Translate complex technical findings into clear, concise, and legally defensible narratives.
• Ensure reports align with applicable legal standards, including Daubert and evidentiary admissibility requirements.
Class Action Support:
• Support defense efforts in class action litigation involving data incidents, privacy issues, and cybersecurity events.
• Analyze scope of data exposure, data at risk, and potential impact to affected populations.
• Assist counsel in evaluating technical claims and counterarguments.
Evidence Handling:
• Direct and validate collection, preservation, and analysis of digital evidence.
• Ensure chain of custody and forensic integrity throughout all engagements.
• Support eDiscovery workflows and coordination with litigation support teams.
Collaboration with Counsel:
• Work closely with outside counsel, in-house legal teams, and insurers throughout litigation lifecycle.
• Assist in deposition preparation, cross-examination strategy, and expert positioning.
• Participate in strategy discussions and provide technical insight into case development.
Regulatory and Standards Alignment:
• Ensure methodologies align with industry standards, including NIST and accepted forensic practices.
• Maintain awareness of evolving legal precedents and requirements impacting expert testimony.
Qualifications:
• Proven experience serving as a testifying expert in digital forensics or cybersecurity matters.
• Demonstrated experience supporting class action defense cases.
• Strong report writing skills with examples of expert reports or declarations.
• Deep understanding of digital forensic methodologies, incident response, and evidence handling.
• Experience working directly with legal counsel and participating in litigation processes.
• Strong ability to communicate complex technical concepts to non-technical audiences.
Preferred Qualifications:
• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• Certifications such as GCFA, EnCE, CCE, CISSP, or similar.
• Prior experience in consulting, expert witness services, or law enforcement.
• Familiarity with eDiscovery platforms and workflows.
• Experience testifying in federal or state courts.
Education:
• A high school diploma or equivalent is required; a college or university degree is a plus.
Why Join LevelBlue?
At LevelBlue, you’re not just an employee—you’re part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you’ll have the support and resources to grow and thrive.
Benefits and Perks:
• Comprehensive medical, dental, and vision insurance.
• 401(k) with employer matching.
• Generous paid time off and holidays.
• Flexible spending accounts and health savings accounts.
• Employee assistance programs.
• Training and development opportunities.
• Adoption assistance program.

This role is open to candidates legally authorized to work in the United States. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.
LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.
To all agencies: Please do not contact LevelBlue employees outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.

#LI-MC1