Digital Forensics and Evidence Handling SME

The Role

This SME position supports a cybersecurity and investigative capability-building engagement, providing expert guidance on digital evidence identification, preservation, and documentation. Day-to-day work includes developing chain-of-custody procedures, forensic-readiness templates, job aids, and practical training materials covering logs, artifacts, cloud platforms, mobile data, and email evidence.

Skills & Experience

Candidates must bring hands-on experience in digital forensics, evidence handling, incident response, or forensic readiness. A solid understanding of chain-of-custody principles, digital evidence preservation, and familiarity with cloud platforms, mobile data, and log/artifact analysis is required. The ability to translate technical knowledge into clear training documentation is essential.

Who It Suits

This role suits an experienced digital forensics practitioner who is comfortable operating as a subject matter expert and adviser rather than a pure hands-on examiner. It is well suited to someone with a background in forensic consulting or law enforcement who enjoys developing guidance materials and supporting organisational capability growth.