Digital Evidence Examiner | Incident Reconstruction Specialist

Abu Dhabi Berkeley Services LLC; Abu Dhabi Emirate; On-site; AED 150,000 - 230,000; Full time

Job summary

Forensic Focus in Abu Dhabi is seeking a digital forensic examiner to conduct investigations on computers, mobile devices, and storage media. The role emphasizes preserving evidence integrity while reconstructing incident timelines and preparing clear reports for investigators and management.

You will perform forensic imaging, artifact analysis, and log correlation, collaborating with cybersecurity, legal, and compliance teams to deliver defensible findings.

Qualifications

• Strong knowledge of forensic methodologies and chain-of-custody procedures.
• Expertise in operating system and file system analysis, and mobile forensics.
• Experience with forensic software tools, data acquisition, and malware/breach investigations.
• Ability to produce clear, technical reports for investigators and legal teams.

Responsibilities

• Perform forensic imaging of computers, mobile devices and storage media.
• Analyze artifacts and reconstruct digital incident timelines.
• Correlate logs from systems and networks to support investigations.
• Prepare detailed reports for investigators, legal teams, and management.

Skills

Forensic methods

Chain-of-custody

OS analysis

Network log analysis

Mobile forensics

Forensic software tools

Data acquisition

Malware investigations

Technical reporting

Job description

The Role

This position involves conducting forensic examinations of computers, mobile devices, and storage media, preserving evidence integrity, and reconstructing digital incident timelines. Responsibilities include forensic imaging, artifact analysis, log correlation, and preparing detailed reports for investigators, legal teams, and management.

Skills & Experience

Candidates need strong knowledge of forensic methodologies, chain-of-custody procedures, operating system and file system analysis, network log examination, and mobile forensics. Experience with forensic software tools, data acquisition, and malware or breach investigations is expected, alongside clear technical reporting skills.

Who It Suits

Suited to mid-level to senior digital forensic examiners who enjoy detailed technical investigation work and collaborating with cybersecurity, legal, and compliance stakeholders to deliver defensible, evidence-based findings.