Lead Forensic Investigator - Grade E1

Airports Company South Africa; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Part time

Job summary

Airports Company South Africa, based in Johannesburg, invites applications for a Lead Forensic Investigator (Grade E1) on a contract. The role focuses on complex investigations into fraud, cybercrime, misconduct, insider threats and data breaches.

You will conduct digital forensic investigations across endpoints, servers, mobile devices, cloud and network environments, preserve and analyse evidence with strict chain of custody, and present findings to senior stakeholders and regulators.

Qualifications

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field.
• 5–7 years of experience in Digital Forensics, Incident Response, Cyber Investigations or related field.
• Experience preparing evidential reports and presenting forensic findings.
• Strong understanding of digital evidence preservation and chain-of-custody principles.

Responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.
• Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.
• Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.
• Conduct endpoint, mobile, cloud, network, memory and malware forensics.
• Prepare forensic reports, affidavits, witness statements and evidential findings.
• Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.
• Present findings to senior stakeholders, legal representatives and regulatory bodies where required.

Skills

Digital Forensics

Incident Response

Cyber Investigations

Evidence Preservation

Chain of Custody

Education

Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field

Tools

EnCase

FTK

Magnet AXIOM

Cellebrite

MSAB XRY

Microsoft Defender

Microsoft Sentinel

Microsoft Purview

Azure

Microsoft 365

AWS

GCP

Job description

Lead Forensic Investigator Grade E1

Location: Johannesburg, Gauteng; Employment Type: Contract

A leading financial services organisation is seeking an experienced Digital Forensics Investigator to conduct complex investigations relating to fraud, cybercrime, misconduct, insider threats and data breaches.

Key Responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.
• Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.
• Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.
• Conduct endpoint, mobile, cloud, network, memory and malware forensics.
• Prepare forensic reports, affidavits, witness statements and evidential findings.
• Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.
• Present findings to senior stakeholders, legal representatives and regulatory bodies where required.

Minimum Requirements

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field.
• 5–7 years' experience in Digital Forensics, Incident Response, Cyber Investigations or a related field.
• Experience preparing evidential reports and presenting forensic findings.
• Strong understanding of digital evidence preservation and chain-of-custody principles.

Technical Skills

Experience with EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Azure, Microsoft 365, AWS or GCP will be advantageous.

Preferred Certifications

GCFA, GCFE, GNFA, GCTI, EnCE, CFCE, CCE, CHFI, CISSP, CISM or relevant Microsoft/AWS/Google security certifications.