Forensic Investigator (5805)

At Harrison McMillan, our mission is simple: to change lives, one placement at a time.

As a trusted recruitment partner to government and industry, we pride ourselves on connecting exceptional people with roles where they can truly make an impact. 

Harrison McMillan is seeking a Forensic Investigator to work with a Federal Government Department in Canberra.

Job

The Cyber Operations Section is seeking a Digital Forensic Investigator. This position is vital to the function of the Cyber Operations Section’s Digital Forensic Capability and involves the application of advanced Analyst skills to gather digital evidence and conduct forensic examination, ensuring chain of custody and integrity of evidence is maintained.

Key duties and responsibilities

• Lead and conduct in-depth digital forensic investigations across the departments devices, systems and cloud infrastructure

• Perform forensic evidence collection, maintaining integrity of digital evidence and chain of custody of devices

• Report on findings and provide detailed and actionable recommendations  

• Support knowledge sharing across the team including development of detailed SOP’s and process documentation

• Provide technical leadership on forensic tooling suite and ensure tools and capabilities are appropriately managed including patching and system updates

Essential criteria

• +3 years working as a Digital Forensic Investigator

• Experience leading, planning and executing digital forensic investigations

• Strong hands-on experience with the use of forensic tools and methodologies

• Ability to work well and share knowledge within a team

• Well-developed writing skills and experience maintaining technical documentation

Desirable

• Demonstrated ability to operate in a client facing environment with strong interpersonal skills

• Organisational ability to manage multiple investigations under tight deadlines

• Familiarity with industry-recognised tools and platforms - Autopsy, Cellebrite, Volatility, FTK Suite, Wireshark

• Relevant technical tertiary qualifications, or certifications are highly desirable

This role is located in Canberra and requires a NV1 clearance