Lead Forensic Investigator - Grade E1

Location:

Johannesburg, Gauteng;

Employment Type:

Contract

A leading financial services organisation is seeking an experienced Digital Forensics Investigator to conduct complex investigations relating to fraud, cybercrime, misconduct, insider threats and data breaches.

• Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.
• Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.
• Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.
• Conduct endpoint, mobile, cloud, network, memory and malware forensics.
• Prepare forensic reports, affidavits, witness statements and evidential findings.
• Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.
• Present findings to senior stakeholders, legal representatives and regulatory bodies where required.

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or related field.
• 5–7 years' experience in Digital Forensics, Incident Response, Cyber Investigations or a related field.
• Experience preparing evidential reports and presenting forensic findings.
• Strong understanding of digital evidence preservation and chain-of-custody principles.

Experience with EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Azure, Microsoft 365, AWS or GCP will be advantageous.

GCFA, GCFE, GNFA, GCTI, EnCE, CFCE, CCE, CHFI, CISSP, CISM or relevant Microsoft/AWS/Google security certifications.