Description

The digital forensics team leader is responsible for leading digital forensic investigations, managing forensic analysts, and overseeing the delivery of forensic services across customer and enterprise environments. The role provides technical leadership for complex investigations involving cyber incidents, fraud, insider threats, regulatory inquiries, and legal matters while ensuring evidence integrity and compliance with applicable standards.

The role ensures forensic services are delivered in accordance with NCSC licensing requirements, industry best practices, and legal evidentiary standards.

Responsibilities

Forensic investigation leadership

• Lead complex digital forensic investigations involving cybersecurity incidents, data breaches, insider threats, fraud investigations, intellectual property theft, and regulatory investigations
• Direct evidence acquisition and analysis activities
• Review and validate forensic findings and conclusions
• Ensure investigations follow approved forensic methodologies and standards

Technical oversight & quality assurance

• Provide technical leadership and guidance to digital forensics analysts
• Review forensic reports and evidence documentation
• Ensure forensic procedures maintain evidentiary integrity and legal defensibility
• Approve investigation methodologies and evidence collection approaches
• Support expert witness and legal support activities where required

Incident response & security investigation support

• Support major incident investigations and breach response activities
• Coordinate forensic activities during ransomware incidents, data compromise events, and advanced threat investigations
• Assist with attribution analysis and attack reconstruction activities

Program development & continuous improvement

• Develop and maintain forensic procedures, evidence handling standards, investigation methodologies, and quality assurance frameworks
• Evaluate emerging forensic technologies and techniques
• Drive service maturity and operational excellence initiatives

Our culture & code of conduct

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.

Requirements

• Bachelor's degree (minimum) in information technology or a related field
• Minimum 3 years experience in cybersecurity, including at least 5 completed digital forensic investigations
• At least one valid NCSC-approved forensics certification like GCFE, GCFA, CHFI, or another certification in the same field approved by the NCSC
• Disk, memory, mobile, and network forensics; evidence handling; forensic tooling (e.g. EnCase, FTK, Autopsy, X-Ways)
• Proven ability to lead forensic engagements and produce defensible reports
• Experience supporting legal proceedings or regulatory investigations is preferable