Forensics Specialist: Evidence & Incident Reconstruction

Abu Dhabi Berkeley Services LLC; Abu Dhabi Emirate; On-site; AED 180,000 - 320,000; Full time

Job summary

Abu Dhabi Berkeley Services LLC in Abu Dhabi seeks a Digital Evidence Examiner | Incident Reconstruction Specialist to conduct digital forensic examinations, analyze electronic evidence, and reconstruct incidents across computers, mobile devices, networks, and storage media. The role collaborates with cybersecurity, legal, and compliance teams to produce accurate findings and detailed reports.

Candidates should be proficient in forensic methodologies, operating systems, storage technologies, and

Qualifications

• Bachelor's degree or higher in digital forensics, cybersecurity, CS, IT, or related field.
• Experience in digital forensic examination, incident investigation, or electronic evidence handling.
• Knowledge of forensic methodologies, evidence preservation, and chain-of-custody procedures.

Responsibilities

• Conduct digital forensic examinations on computers, laptops, mobile devices, storage media, and other electronic systems.
• Identify, collect, preserve, and examine digital evidence per established forensic procedures.
• Ensure evidence integrity through documentation, secure handling, and chain-of-custody management.
• Perform forensic imaging and data acquisition using validated methodologies.
• Analyze file systems, OS artifacts, logs, and metadata for incident reconstruction.
• Reconstruct timelines and sequences of events from system records and artifacts.
• Correlate evidence from multiple sources to establish incident timelines and relationships.

Skills

Analytical thinking

Attention to detail

Technical writing

Communication skills

Problem solving

Team collaboration

Education

Bachelor's degree in Digital Forensics, Cybersecurity, Computer Science, or related field

Tools

EnCase

FTK

Autopsy

X-Ways Forensics

Magnet AXIOM

Job description

Abu Dhabi Berkeley Services LLC in Abu Dhabi seeks a Digital Evidence Examiner | Incident Reconstruction Specialist to conduct digital forensic examinations, analyze electronic evidence, and reconstruct incidents across computers, mobile devices, networks, and storage media. The role collaborates with cybersecurity, legal, and compliance teams to produce accurate findings and detailed reports.

Candidates should be proficient in forensic methodologies, operating systems, storage technologies, and