Digital Forensic First Responder (Entry-Level)

Forensic Focus Limited; Centurion; On-site; ZAR 180,000 - 300,000; Full time

Job summary

Forensic Focus Limited is seeking an entry-level digital forensics support role near Johannesburg. You will assist investigators under mentorship, collecting and preserving digital evidence and maintaining chain of custody while learning to analyze logs, files and emails.

Ideal candidates hold a Matric qualification with ongoing or completed cybersecurity/IT studies, up to two years of experience, and a willingness to work on-site and travel with a valid passport.

Qualifications

• Matric qualification alongside current or completed studies in cybersecurity, IT, or a related field.
• Up to two years' experience.
• Familiarity with operating systems and file systems.
• Training is provided on FTK Imager, Autopsy, Cellebrite, EnCase, and EDR platforms.
• SOC or networking knowledge is advantageous.

Responsibilities

• Support digital forensic investigations and cyber incident response.
• Collect and preserve digital evidence, maintain chain of custody.
• Perform supervised analysis of logs, files, and emails.
• Document findings accurately for legal and audit purposes.

Skills

Operating systems knowledge

File systems knowledge

Attention to detail

Professional communication

Networking knowledge (SOC)

Team collaboration

Education

Matric qualification

Studies in cybersecurity/IT or related field

Tools

FTK Imager

Autopsy

Cellebrite

EnCase

EDR platforms

Job description

The Role

Working under experienced investigators, this entry-level position involves supporting digital forensic investigations and cyber incident response. Responsibilities include collecting and preserving digital evidence, maintaining chain of custody, performing supervised analysis of logs, files, and emails, and documenting findings accurately for legal and audit purposes.

Skills & Experience

Candidates need a Matric qualification alongside current or completed studies in cybersecurity, IT, or a related field, with up to two years' experience. Familiarity with operating systems and file systems is expected. Training is provided on FTK Imager, Autopsy, Cellebrite, EnCase, and EDR platforms. SOC or networking knowledge is advantageous.

Who It Suits

This role is ideal for recent graduates or career changers eager to enter digital forensics in a structured, mentored environment. It suits methodical individuals with strong attention to detail and professional communication skills. Candidates must be able to work on-site near Johannesburg and hold, or be able to expose, a valid passport.