Investigator, Digital Forensics (Non-Perm)

Isilumko Staffing; Johannesburg; On-site; ZAR 550,000 - 950,000; Full time

Job summary

Isilumko Staffing seeks an Investigator, Digital Forensics to conduct in-depth investigations across endpoints, cloud, and network environments, ensuring preservation, analysis and reporting of digital evidence. The role requires formal training in digital forensics and multiple forensic tools.

Responsibilities include data management, forensic analysis, and producing affidavits and reports for disciplinary, regulatory and legal proceedings. On-site work in Johannesburg is expected.

Qualifications

• Bachelor's degree in digital forensics, cyber security, computer science, information security, information systems or related field.
• Minimum 5–7 years' experience in Digital Forensics, Incident Response, Cyber Investigations or related discipline.
• Experience preparing evidential reports and presenting findings to senior stakeholders, regulators and legal representatives.

Responsibilities

• Gather, preserve, acquire, extract and analyze digital evidence from endpoints, servers, mobile devices, cloud environments, M365, network infrastructure and other sources.
• Recover deleted, hidden, encrypted or damaged data using approved forensic methodologies and tools.
• Conduct forensic analysis of user activity, emails, authentication records, cloud audit logs, browser activity and application artefacts.
• Prepare detailed forensic reports, statistics, trends, findings, conclusions and recommendations for stakeholders.
• Maintain chain of custody and secure storage/retention of digital evidence.

Skills

Digital Forensics

Incident Response

Cyber Investigations

Education

Bachelor's degree in Digital Forensics / Cyber Security / CS / Info Security

Tools

EnCase

FTK

Magnet AXIOM

Cellebrite

MSAB XRY

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Other industry tools

Job description

Investigator, Digital Forensics (Non-Perm)

Job Purpose:

Conduct in-depth digital forensic investigations across the company, in adherence with the Group Digital Forensic Investigation Framework and standards, to identify, preserve, analyze and report on digital evidence relating to fraud, cybercrime, misconduct, insider threats and data breaches.

Key Responsibilities

Data Management and Analysis

• Gather, preserve, acquire, extract and analyze digital evidence from endpoints, servers, mobile devices, cloud environments, Microsoft 365, network infrastructure, and other digital sources.

• Recover deleted, hidden, encrypted, or damaged data using approved forensic methodologies and tools.

• Conduct forensic analysis of user activity, email communications, authentication records, cloud audit logs, browser activity, and application artefacts.

• Prepare detailed forensic reports, statistics, trends, findings, conclusions, and recommendations for stakeholders.

• Maintain chain of custody and ensure secure storage, management, and retention of digital evidence in accordance with organizational standards.

Technology and Architecture

• Conduct endpoint, mobile, cloud, network, memory, and malware forensic investigations.

• Perform forensic investigations across Microsoft Azure, Microsoft 365, AWS, Google Cloud Platform, and SaaS environments.

• Utilize forensic, eDiscovery, and security technologies including EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, and other industry-standard tools.

Risk, Regulatory and Compliance

• Conduct digital forensic investigations in accordance with legal, regulatory, and organizational requirements.

• Conduct root cause analysis to identify control weaknesses and recommend corrective actions to mitigate future incidents.

• Prepare affidavits, witness statements, and evidential reports for disciplinary, civil, regulatory, and criminal proceedings.

• Testify and present forensic findings in disciplinary hearings, tribunals, and court proceedings when required.

• Identify and elevate emerging digital crime trends, risks, and significant findings to appropriate stakeholders.

Qualifications and Experience

Minimum Qualifications

• Bachelor's degree in digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems, or a related field.

Experience

• Minimum 5--7 years' experience in Digital Forensics, Incident Response, Cyber Investigations, or a related discipline.

• Experience preparing evidential reports and presenting findings to senior stakeholders, regulators, and legal representatives.

Preferred Certifications

• GCFA, GCFE, GNFA, GCTI

• EnCE, CFCE, CCE, CHFI

• CISSP, CISM

• Microsoft Security Certifications

• AWS Security Specialty

• Google Professional Cloud Security Engineer