Computer Forensic Examiner

The Role

Examiners lead forensic investigations—primarily ransomware and business email compromise cases—identifying points of compromise, potential data exfiltration, and indicators of compromise. Work spans Windows, Linux, VMware, ESXi, and firewall environments, and includes applying data recovery techniques and producing written forensic reports for incident response engagements.

Skills & Experience

Candidates should have hands-on experience conducting forensic examinations across diverse operating systems and virtualised environments. Familiarity with ransomware investigations, BEC analysis, IOC identification, and forensic reporting is essential. Owning personal forensic tooling is a significant advantage, though not a formal requirement.

Who It Suits

This opportunity suits independent contractors and freelancers who can mobilise at short notice and operate autonomously on engagements typically lasting one to three weeks. It is not suited to those seeking permanent employment or anyone who requires several days of lead time before commencing a project.