Investigator: Digital Forensics

About the role

A leading financial services organisation is looking for an experienced Digital Forensics Investigator to lead complex investigations into fraud, cybercrime, insider threats and data breaches.

Key responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices, cloud, Microsoft 365 and network environments.
• Acquire, preserve, recover and analyse digital evidence while maintaining chain of custody.
• Analyse email, user activity, authentication logs, cloud audit logs and application artefacts.
• Perform endpoint, mobile, cloud, network, memory and malware forensics.
• Prepare forensic reports, affidavits, witness statements and evidential findings.
• Conduct root cause analysis and identify control weaknesses and emerging digital crime risks.
• Present findings to senior stakeholders, legal representatives and regulatory bodies as required.

Required profile

• Bachelor's degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems or a related field.
• 5–7 years of experience in Digital Forensics, Incident Response, Cyber Investigations or a related discipline.
• Proven experience preparing evidential reports and presenting forensic findings.
• Strong understanding of digital evidence preservation and chain‑of‑custody principles.

Required skills

• Proficiency with EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY.
• Experience using Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Azure, Microsoft 365.
• Familiarity with cloud platforms such as AWS and GCP.