Digital Forensic Examiner (Manchester)

Location: Manchester M24 1SW

At CYFOR, we are at the forefront of providing Digital Forensics, eDiscovery, and Cyber Security services across the nation to law firms, corporate organisations, and law enforcement agencies. We are in search of extraordinary individuals who are not only passionate about technology but also driven by the ambition to make a significant impact in society. Our team members are the cornerstone of our success, embodying innovation and a willingness to think creatively. If you are looking for a dynamic role that promises diversity and fulfillment, and are eager to collaborate with like‑minded professionals in a supportive and vibrant environment, CYFOR invites you to join us.

CYFOR is currently recruiting for a Digital Forensic Examiner, based in our Manchester head office. We’re looking for candidates with at least 1 year of industry experience in either the public or private sector. Please do not apply if you are a recent graduate.

The successful candidate will be responsible for data acquisition and be required to acquire and process data from many forms of electronic evidence, which are likely to differ from one day to the next. They will be responsible for the identification, preservation, extraction of computer and mobile device evidence.

Security Clearance

Please note that this role will require NPPV3 clearance in addition to National security clearance to SC level. In order to achieve this, you must be a British National and have resided in the United Kingdom for the last 5 years. Exemptions apply for overseas or other diplomatic service (with HM Government), and studying abroad. If you do not hold an active SC clearance, please familiarise yourself with the vetting process before applying.

Job specification

• An exciting role within a relaxed friendly environment.
• Good long‑term career prospects with ongoing personal development and the opportunity to be involved in our Cyber Security and eDiscovery services.
• Conduct forensically sound acquisitions of computer systems and mobile devices and associated media, either on‑site or in the lab, ensuring continuity of all exhibits and maintaining integrity throughout within an ISO 17025 accredited laboratory.
• Secure and retrieve data from computer systems and mobile devices in accordance with ACPO guidelines, utilising proprietary and bespoke software, in order to preserve evidence gathered during the course of investigations.
• To record the details of data acquisition undertaken and maintain the confidentiality of this information.
• To liaise with other bodies or agencies as and when required.
• To ensure the work meets quality standards in providing a service to all clients; to report or escalate issues, as appropriate, to the Digital Forensics Manager.
• To present evidence in court in a clear and comprehensive manner.
• To ensure that appropriate security and access control of forensic tools, systems and evidence is maintained at all times.
• Assist with verification tests of forensic software and hardware and methods to independently validate functionality.
• To develop experience and detailed technical knowledge of current technology and the wide variety of tools and techniques used to assist in the acquisition of evidence and the identification and recovery of data.
• Attend seminars and classes for training in specialised forensic software applications, forensic analysis techniques and other specialised areas.
• To assist, in a mentor role, in the training and development of technicians, when required to do so.
• To maintain professional liaison and membership in professional organisations for cross-feed of technical information.
• To adhere to all CYFOR policies, practices and procedures.
• Maintain safe working practices in accordance with the CYFOR Health and Safety at Work policy.
• To attend regular mandatory counselling and mental health wellbeing sessions as required.
• To undertake any other duties that may be required.
• To be prepared to work outside of normal office hours and/or to travel as and when required.
• Work is performed under the general supervision of the Digital Forensics Manager.

Qualities we are looking for

• You should have a good knowledge and understanding of the diversity of computer crime and the laws and principles concerned with digital forensics and electronic evidence including an understanding of ISO 17025 and the FSR codes.
• You must have experience with mainstream forensic software and will ideally have undertaken training to entry level (at least) in one or all of the following, EnCase, FTK, X‑Ways, NUIX, Magnet Axiom, Cellebrite UFED and MSAB XRY.
• An excellent understanding of analysing and interpreting file systems and operating system artefacts.
• Good written and verbal communication skills as you will be expected to compose comprehensive reports and statements and may be required to present your findings in court.
• You will be able to demonstrate that you can contribute a skill set that will be of value to our team alongside a proven track record in digital investigations practices.