Digital Forensics Investigator

Network Contracting; Johannesburg; On-site; ZAR 600,000 - 900,000; Part time

Job summary

Network Contracting seeks an Investigator: Digital Forensics on a non-permanent basis to conduct in-depth digital forensic investigations across the organisation, including endpoints, servers, mobile devices, cloud environments and Microsoft 365.

The role involves preserving, acquiring and analysing digital evidence, maintaining chain of custody, and presenting findings to senior stakeholders and legal representatives, with engagement across complex investigations and regulatory considerations.

Qualifications

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science or related field.
• Minimum 5+ years' experience in digital forensics and incident response.
• Experience handling digital evidence across endpoints, servers, cloud and network.
• Experience presenting findings to senior stakeholders and regulators.
• Ability to maintain chain of custody and adhere to standards.

Responsibilities

• Conduct end-to-end digital forensic investigations across endpoints, servers, mobile devices, cloud environments and MS 365.
• Gather, preserve, acquire, extract and analyse digital evidence using approved methodologies.
• Maintain accurate chain-of-custody records and present findings to stakeholders and legal representatives.
• Prepare affidavits, witness statements and evidentiary reports for proceedings.
• Identify trends and elevate emerging digital crime risks to stakeholders.

Skills

Digital forensics

Evidence handling

Analytical mindset

Report writing

Communication skills

Education

Bachelor's degree in Digital Forensics or related field

Tools

EnCase

FTK

Magnet AXIOM

Cellebrite

MSAB XRY

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Job description

Company and Job Description

Our client is seeking an Investigator: Digital Forensics on a non-permanent basis to conduct in-depth digital forensic investigations across the organisation.

The successful candidate will be responsible for identifying, preserving, acquiring, extracting and analysing digital evidence relating to fraud, cybercrime, misconduct, insider threats and data breaches. You will work across a broad technology landscape, including endpoints, servers, mobile devices, cloud environments, Microsoft 365 and network infrastructure.

This role offers the opportunity to work on complex investigations while applying recognised forensic methodologies, maintaining evidential integrity and presenting findings to senior stakeholders and legal representatives.

Key Responsibilities

Conduct end-to-end digital forensic investigations across endpoints, servers, mobile devices, cloud environments, Microsoft 365, network infrastructure and other digital sources. Gather, preserve, acquire, extract and analyse digital evidence using approved forensic methodologies and tools. Recover deleted, hidden, encrypted or damaged data as part of forensic investigations. Analyse user activity, email communications, authentication records, cloud audit logs, browser activity and application artefacts. Conduct endpoint, mobile, cloud, network, memory and malware forensic investigations. Perform forensic investigations across Microsoft Azure, Microsoft 365, AWS, Google Cloud Platform and SaaS environments. Utilise forensic, eDiscovery and security technologies to identify, analyse and preserve relevant digital evidence. Maintain accurate chain-of-custody records and ensure the secure storage, management and retention of digital evidence. Prepare detailed forensic reports, statistics, trends, findings, conclusions and recommendations for stakeholders. Conduct root cause analysis to identify control weaknesses and recommend corrective actions to reduce future risk. Prepare affidavits, witness statements and evidential reports for disciplinary, civil, regulatory and criminal proceedings. Present and testify on forensic findings at disciplinary hearings, tribunals and court proceedings when required. Identify and elevate emerging digital crime trends, risks and significant findings to the relevant stakeholders.

Job Experience and Skills Required

Education:

Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or a related field.

Experience:

Minimum 57 years' experience in Digital Forensics, Incident Response, Cyber Investigations or a related discipline. Demonstrated experience conducting complex digital forensic investigations. Experience working with digital evidence across endpoint, mobile, cloud, network and/or memory environments. Experience preparing evidential reports and presenting forensic findings to senior stakeholders, regulators and legal representatives. Experience maintaining chain of custody and handling digital evidence in accordance with forensic standards.

Technical Skills:

Strong knowledge of digital forensic investigation methodologies and evidence handling. Experience with cloud forensic investigations across Microsoft Azure, Microsoft 365, AWS, Google Cloud Platform and SaaS environments. Exposure to forensic and eDiscovery tools such as EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender and Microsoft Purview. Strong analytical and investigative capabilities, with the ability to identify patterns, trends, anomalies and root causes. Excellent report writing and evidential documentation skills. Strong verbal communication and presentation skills.

Advantageous Certifications:

GCFA, GCFE, GNFA or GCTI. EnCE, CFCE, CCE or CHFI. CISSP or CISM. Microsoft Security Certifications. AWS Security Specialty. Google Professional Cloud Security Engineer.