Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.
Isilumko Staffing's Johannesburg client, a leading financial services organisation, is seeking a Digital Forensics Investigator on a contract basis to tackle fraud, cybercrime and data breaches.
You will conduct investigations across endpoints, servers, mobile devices, cloud and network environments; preserve evidence with chain of custody; analyse logs and artefacts; and prepare reports and witness statements.
Job Description
Investigator: Digital Forensics
Location: Johannesburg, Gauteng
Employment Type: Contract
A leading financial services organisation is seeking an experienced Digital Forensics Investigator to conduct complex investigations relating to fraud, cybercrime, misconduct, insider threats and data breaches.
Key Responsibilities
Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.
Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.
Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.
Conduct endpoint, mobile, cloud, network, memory and malware forensics.
Prepare forensic reports, affidavits, witness statements and evidential findings.
Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.
Present findings to senior stakeholders, legal representatives and regulatory bodies where required.
Minimum Requirements
Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field.
5-7 years' experience in Digital Forensics, Incident Response, Cyber Investigations or a related field.
Experience preparing evidential reports and presenting forensic findings.
Strong understanding of digital evidence preservation and chain-of-custody principles.
Technical Skills
Experience with EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Azure, Microsoft 365, AWS or GCP will be advantageous.
Preferred Certifications
GCFA, GCFE, GNFA, GCTI, EnCE, CFCE, CCE, CHFI, CISSP, CISM or relevant Microsoft/AWS/Google security certifications.