Senior Cybersecurity – Digital Forensic Investigator

The Role

The investigator conducts end-to-end digital forensic investigations arising from cybersecurity incidents, covering endpoint, memory, cloud, network, and log analysis. Responsibilities include preserving evidentiary integrity, reconstructing attack timelines, determining scope and root cause, and producing detailed technical and executive-level reports while participating in an on-call rotation.

Skills & Experience

A minimum of three years in digital forensics or a closely related discipline is required, with hands-on experience across Windows, Linux, macOS, and public cloud platforms such as AWS and Azure. Familiarity with SIEM and EDR platforms, scripting languages, and forensic certifications including GCFA, GCFE, GCIH, EnCE, or CFCE are strongly preferred.

Who It Suits

This role suits an experienced forensic investigator comfortable working independently on complex, time-sensitive cases within a large enterprise environment. Those who can communicate technical findings clearly to non-technical stakeholders and who keep pace with emerging threats, AI-assisted analysis, and evolving attack tradecraft will thrive here.