Digital Forensics & eDiscovery Manager

Job Description/Preferred Qualifications: As a member of the Legal and Compliance Organization ("LCO"), you will lead KLA's digital forensics, investigations support, ESI preservation, eDiscovery, information governance, and forensic advisory functions. You will serve as the primary escalation point and subject-matter lead for digital forensic investigations, legal holds, eDiscovery collections and review, insider risk support, mobile and remote collections, cloud and collaboration-platform evidence, AI-related evidence, and cross-functional matters involving Legal, Compliance, Human Resources, Cybersecurity, IT, Intellectual Property, and business stakeholders. The role requires a hands-on leader who can mentor a global team, apply forensic judgment to new technologies, and translate complex data into accurate, defensible, timely, and business-relevant findings.

Responsibilities: Identify, investigate, preserve, collect, analyze, and reduce risk by performing the following: Lead, mentor, and develop a global digital forensics and eDiscovery team, including internal analysts, contractors, external vendors, and regional support partners. Oversee defensible forensic analysis, evidence preservation, data collection, review support, reporting, and evidence interpretation for investigations, legal matters, business functions, and global evidence management activities. Analyze evidence from endpoint DLP, Microsoft 365 Purview, Teams, Outlook, OneDrive, SharePoint, SIEM/security logs, Intune/MDM, mobile devices, network/cloud artifacts, OSINT sources, and AI prompts, outputs, and usage logs where available. Manage forensic imaging, remote endpoint collections, targeted mobile collections, evidence intake, release, disposition, and chain-of-custody processes in accordance with applicable law, policy, and legal hold obligations. Improve eDiscovery and ESI preservation processes, including legal holds, custodian identification, data collection, review set preparation, reconciliation, release workflows, and defensible retention or disposition decisions. Develop defensible approaches for AI-related evidence, including prompts, inputs, outputs, usage logs, model-assisted summaries, and AI-generated or AI-modified content, with appropriate human validation and privilege, privacy, security, and records-management controls. Partner with Cybersecurity and IT on incident response, insider risk, monitoring, logging, forensic readiness, threat-related investigations, and post-incident evidence preservation. Support LCO special projects, including information governance, data mapping, records and hard-drive disposition, communication monitoring governance, fraud and impersonation takedowns, dawn raid readiness, policy initiatives, training, dashboards, and workflow automation.

Desired: Experience drafting forensic reports, declarations, certifications, affidavits, witness statements, or similar materials and explaining findings in litigation, regulatory, employment, law enforcement, or similar proceedings. Experience managing external forensic, eDiscovery, OSINT, incident response, and international investigation vendors. Relevant certifications or training in digital forensics, incident response, eDiscovery, cybersecurity, OSINT, cloud forensics, mobile forensics, or AI governance are desirable.

Minimum Qualifications: Bachelor's degree preferred in Digital Forensics, Computer Science, Computer Engineering, or a related field. Minimum of 5 to 7 years of experience in digital forensics, investigations, eDiscovery, incident response, information governance, or supporting investigators as an analyst, examiner, program lead, or equivalent role. Demonstrated ability to lead a high-performing team, manage contractors and vendors, and collaborate across departments, regions, time zones, and senior stakeholder groups. Ability to manage multiple investigations, legal holds, data requests, eDiscovery matters, incident response support activities, and special projects concurrently. Experience operating in a legal or compliance environment where privilege, confidentiality, proportionality, defensibility, and coordination with counsel are critical. Previous multinational company experience and ability to support multiple global time zones and international travel are highly desirable. Excellent communication, stakeholder coordination, project management, and team leadership skills. Ability to lift, move, open, disassemble, and assemble up to 50 pounds of computers, laptops, servers, and other computing devices. Base Pay Range: $174,300.00 - $296,300.00 Annually Primary Location: USA-CA-Milpitas-KLAKLA's total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave. Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process. KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at talent.acquisition@kla.com or at +1-408-352-2808 to request accommodation. Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment. Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA.Please ensure that you have searched KLA's Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.

Location: Milpitas, CA; Ann Arbor, MI

Type: Full time