Digital Forensics Investigator: Incident Reconstruction

Forensic Focus; Abu Dhabi Emirate; On-site; AED 150,000 - 230,000; Full time

Job summary

Forensic Focus in Abu Dhabi is seeking a digital forensic examiner to conduct investigations on computers, mobile devices, and storage media. The role emphasizes preserving evidence integrity while reconstructing incident timelines and preparing clear reports for investigators and management.

You will perform forensic imaging, artifact analysis, and log correlation, collaborating with cybersecurity, legal, and compliance teams to deliver defensible findings.

Qualifications

• Strong knowledge of forensic methodologies and chain-of-custody procedures.
• Expertise in operating system and file system analysis, and mobile forensics.
• Experience with forensic software tools, data acquisition, and malware/breach investigations.
• Ability to produce clear, technical reports for investigators and legal teams.

Responsibilities

• Perform forensic imaging of computers, mobile devices and storage media.
• Analyze artifacts and reconstruct digital incident timelines.
• Correlate logs from systems and networks to support investigations.
• Prepare detailed reports for investigators, legal teams, and management.

Skills

Forensic methods

Chain-of-custody

OS analysis

Network log analysis

Mobile forensics

Forensic software tools

Data acquisition

Malware investigations

Technical reporting

Job description

Forensic Focus in Abu Dhabi is seeking a digital forensic examiner to conduct investigations on computers, mobile devices, and storage media. The role emphasizes preserving evidence integrity while reconstructing incident timelines and preparing clear reports for investigators and management.

You will perform forensic imaging, artifact analysis, and log correlation, collaborating with cybersecurity, legal, and compliance teams to deliver defensible findings.