Digital Forensics Investigator – Cloud & Incident Response

Gijima Holdings; Gauteng; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Gijima Holdings is seeking an experienced Digital Forensics professional to lead investigations across endpoints, cloud, and networks. You will gather and preserve evidence, perform complex analyses and produce detailed reports for senior stakeholders.

The role requires 5–7 years of experience, strong knowledge of forensic tools, and the ability to present findings in regulatory settings. This is a full-time on-site position in Gauteng, South Africa.

Qualifications

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security or related field.
• 5–7 years' experience in Digital Forensics, Investigations, Incident Response or related discipline.
• Experience conducting complex investigations across multiple tech environments.
• Experience preparing forensic reports and presenting findings to stakeholders or regulators.

Responsibilities

• Gather, preserve, extract and analyse digital evidence from endpoints, servers, mobile devices, cloud and networks.
• Recover deleted, hidden, encrypted or damaged data using forensic methods and tools.
• Analyse user activity, emails, logs and artefacts to establish timelines and indicators of compromise.
• Prepare detailed forensic reports, findings and recommendations for stakeholders.
• Maintain chain of custody and secure storage of digital evidence.
• Conduct endpoint, cloud and network forensic investigations using industry-standard technologies.
• Apply forensic methodologies to identify, collect and preserve evidence with integrity.
• Stay updated on emerging digital threats and investigative techniques.
• Provide expert evidence or testimony when required and support regulatory proceedings.

Education

Bachelors in Digital Forensics

Tools

EnCase

FTK

Magnet AXIOM

Cellebrite

MSAB XRY

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Job description

Gijima Holdings is seeking an experienced Digital Forensics professional to lead investigations across endpoints, cloud, and networks. You will gather and preserve evidence, perform complex analyses and produce detailed reports for senior stakeholders.

The role requires 5–7 years of experience, strong knowledge of forensic tools, and the ability to present findings in regulatory settings. This is a full-time on-site position in Gauteng, South Africa.