Job Description Position Title: EL1 Lead Forensic Investigator Employment Type: Labour hire - Approx. 12 months with potential to extend Location: Canberra, ACT Hourly Pay Rate: Negotiable dependent on skills and experience Security Clearance/Requirements: Must hold a minimum Negative Vetting 1 clearance at time of application Working Arrangements: Full-time, on-site in Canberra ABOUT THE ROLE An exciting opportunity exists for an experienced Digital Forensic Investigator to join a high-performing Cyber Operations team within a large Federal Government department. This role sits within a specialised cyber capability responsible for conducting complex digital forensic investigations across enterprise devices, systems and cloud infrastructure. The successful candidate will apply advanced analytical skills to gather, preserve and examine digital evidence, ensuring strict adherence to chain of custody and evidence integrity standards. This is a leadership-level role requiring strong technical capability, sound judgement and the ability to contribute to uplift of forensic processes, tools and team knowledge. KEY RESPONSIBILITIES Lead and conduct in-depth digital forensic investigations across devices, systems and cloud environments Perform forensic evidence collection while maintaining integrity and chain of custody Analyse findings and prepare detailed, clear and actionable investigation reports Develop and maintain Standard Operating Procedures (SOPs) and technical process documentation Provide technical leadership across the forensic tooling suite, including management, patching and updates Contribute to knowledge sharing and capability uplift within the broader cyber operations team SKILLS AND EXPERIENCE Essential: Minimum 3 years’ experience working as a Digital Forensic Investigator Demonstrated experience leading, planning and executing digital forensic investigations Strong hands-on experience with digital forensic tools and investigative methodologies Ability to collaborate effectively within a team and share technical knowledge Well-developed written communication skills and experience maintaining technical documentation Desirable: Experience operating in client-facing environments with strong interpersonal skills Proven ability to manage multiple investigations under tight deadlines Familiarity with industry-recognised tools and platforms such as Autopsy, Cellebrite, Volatility, FTK Suite and Wireshark Relevant tertiary qualifications or industry certifications in digital forensics or cyber security ELIGIBILITY Applicants must be Australian Citizens and hold a minimum Negative Vetting 1 clearance at time of application. Apply now or contact Angel Malkovich on 6260 8888 at SOS Recruitment for a confidential discussion. PLEASE NOTE: Applications for this role will close on 17 March 2026. If your application is received after this date, we’ll be happy to keep your CV on file for similar opportunities that may come up. We encourage you to apply, even if the closing date has passed. SOS Recruitment is committed to the principles of workplace diversity and equity in employment and we encourage applications from Aboriginal and Torres Strait Islanders, people with disabilities, women, people with family responsibilities, people with diverse linguistic and cultural backgrounds, religious beliefs and LGBTIQ people.
