Digital Forensic Investigator
Network Contracting Solutions -a division of ADvTECH Resourcing
Johannesburg
The Role
The investigator conducts end-to-end digital forensic examinations across a broad technology landscape including endpoints, servers, mobile devices, Microsoft 365, cloud platforms and network infrastructure. Responsibilities include evidence preservation, chain-of-custody management, forensic analysis of user activity and artefacts, root cause analysis, and presenting or testifying on findings in legal and disciplinary proceedings.
Skills & Experience
Candidates require five to seven years of digital forensics or cyber investigation experience, a relevant degree, and hands-on proficiency with tools such as EnCase, FTK, Magnet AXIOM, Cellebrite, MSAB XRY, Microsoft Sentinel, Defender and Purview. Cloud forensics experience across Azure, Microsoft 365, AWS and Google Cloud Platform is essential, along with eDiscovery tool exposure.
Who It Suits
This contract suits a seasoned forensic investigator comfortable working in complex, regulated environments and confident presenting technical findings to senior stakeholders, legal representatives and courts. Those experienced in fraud, cybercrime, insider threat and data breach investigations within corporate or government settings will thrive in this role.
Compare Digital Forensics salaries in South Africa →
Certifications mentioned: XRY — find training for these on the DFIR Training Finder.





