Forensic Imaging Specialist

TITLE: Forensic Imaging Specialist (Contract)
Location Milwaukee, WI area. Onsite work is required to handle physical devices.
Schedule Full time, 40 hours per week, Monday through Friday, 8:00 a.m. to 5:00 p.m.
Type Contract
LENGTH: 2 months, could extend
RATE: Up to $45/hr 1099 or C2C

About the Role

What You'll Do

• Perform forensic imaging of laptops and desktops when Legal requires it.
• Verify image integrity, document each imaging step, and maintain chain of custody throughout the process.
• Transfer completed forensic images to approved cloud storage and confirm each upload succeeded.
• Locate returned devices and reconcile them against a legal hold tracking list.
• Confirm which user each device belongs to and record its custody details.
• Request user details from HR, such as job title, separation date, and reason for separation.
• Coordinate reviews with Legal to decide whether each device stays on hold, gets imaged, or can be released.
• Keep the tracking list accurate and current. Record status, decisions, imaging progress, next steps, and final disposition.
• Keep held devices secured in approved storage.
• Coordinate the return of released devices. Document who approved the release, who received the device, and when.
• Work through an existing inventory of external drives used in past imaging work. Confirm the processing and disposition each one needs.
• Help confirm whether a device or person is still under legal hold when questions come up.
• Escalate blockers to Security leadership. Examples include missing devices, custody mismatches, and encryption or recovery key issues.

What You Bring

• 2+ years of hands-on forensic imaging experience using industry tools such as FTK Imager, EnCase, Magnet AXIOM, or similar.
• 2+ years of experience in IT asset management, desktop support, eDiscovery support, or a similar role.
• Solid understanding of forensic best practices, including write blocking, hash verification, and evidence handling.
• Understanding of legal holds and chain of custody.
• Familiarity with Microsoft Purview eDiscovery and legal hold.
• Experience with BitLocker recovery and Windows device management.
• Experience with Azure Blob Storage or similar cloud storage.
• Experience working with HR or Legal teams in a regulated or enterprise environment.
• Strong organization skills. You keep detailed records and follow processes closely.
• Clear written and verbal communication with technical and non-technical teams.
• Comfort handling confidential and sensitive information with discretion.
• Strong Excel skills for tracking and reporting.
• Ability to work independently and manage your own queue.