Investigator: Digital Forensics

SUMMARY:
-

POSITION INFO:

Job Description

Investigator: Digital Forensics

Location: Johannesburg, Gauteng
Employment Type: Contract

A leading financial services organisation is seeking an experienced Digital Forensics Investigator to conduct complex investigations relating to fraud, cybercrime, misconduct, insider threats and data breaches.

Key Responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.

• Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.

• Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.

• Conduct endpoint, mobile, cloud, network, memory and malware forensics.

• Prepare forensic reports, affidavits, witness statements and evidential findings.

• Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.

• Present findings to senior stakeholders, legal representatives and regulatory bodies where required.

Minimum Requirements

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field.

• 5–7 years' experience in Digital Forensics, Incident Response, Cyber Investigations or a related field.

• Experience preparing evidential reports and presenting forensic findings.

• Strong understanding of digital evidence preservation and chain-of-custody principles.

Technical Skills

Experience with EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Azure, Microsoft 365, AWS or GCP will be advantageous.

Preferred Certifications

GCFA, GCFE, GNFA, GCTI, EnCE, CFCE, CCE, CHFI, CISSP, CISM or relevant Microsoft/AWS/Google security certifications.

Apply now by submitting your CV.

Alternatively, send your CV to: cleo.

Only suitable candidates who meet the minimum requirements will be contacted. If you have not been contacted within 2 weeks of applying, please consider your application unsuccessful.