Skip to main content
AfterDuty

Digital Forensics and Cyber Crime Investigator - South West Regional Organised Crime Unit (SWROCU)

Avon and Somerset Police · Bristol, South West England

Salary
£42,612 – £45,765Estimated
Type
Full-time
Posted
2 days ago

Overview

This role directly leverages your investigative mindset, evidence-handling discipline, and experience with digital evidence from policing. Your familiarity with forensic procedures, case-file preparation, and presenting findings in court translates seamlessly into digital forensics and cyber crime investigation. The job explicitly values a sound forensic approach and the ability to communicate technical findings to investigators, which mirrors your existing skills in managing complex cases and writing clear reports.

About this role

Full Time

Part-time hours will be considered

Permanent

SWROCU Northern Hub, Bristol, near BS34 6PY

Please note that the location of the role will have an impact on the terms and conditions. If you have any concerns about your ability to regularly travel to this location using your own transport, then please speak to the hiring manager before submitting an application.

If you are applying from one of the Regional Forces you will be seconded to SWROCU in line with the Joint Services Agreement and will remain on your home force terms and conditions and graded pay scale for the role. This recruitment platform is hosted by Avon and Somerset Constabulary.

D&C: Grade 8

Dorset: Grade F

Glos: SO2

Wilts: W10

Role Description

The South West Regional Organised Crime Unit (SWROCU) is looking for a Digital Forensics and Cyber Crime Investigator keen to progress their career within the Regional Cyber Lab.

The Regional Cyber Lab is a multi-disciplinary team that works closely with partners and deals with the most serious types of cyber criminality affecting the South West region. Alongside these investigations, the team has a significant part to play in investigating cyber dependent crimes such as computer network intrusions, denials of service, ransomware extortion, malware development, supply, deployment and data theft/ breaches.

The role requires a dynamic and innovative investigator using cutting edge techniques and technology. There will be a need for you to display a sound forensic approach to investigations, and you’ll undertake live and dead box data recovery and network forensics to provide evidentially sound technical support to operations and investigations into the most serious incidents of computer network-based crimes. You will need to be able to communicate your findings in both written and verbal form to the understanding of cyber-crime investigators and victims.

Technical skills in computer network analysis, mobile phone and device examination are important. There will be structured training course opportunities, but you will also be expected to keep up to date with current cyber-crime trends and technologies. An awareness of the threats posed by cyber-crime is also essential. The post holder must hold a full current driving licence. Some flexibility in the pattern of working may be required to meet special demands of the duties of the post.

SWROCU is a collaboration of police officers and police staff from the five South West regional forces. We’re part of a national network of nine ROCUs covering England and Wales.

We have more than 20 capabilities that staff and officers work in to Pursue offenders, Protect and Prepare individuals and organisations, and Prevent people from engaging in serious and organised crime.

Our capabilities are here to advise, to assist, or to fully adopt investigations.

We work with local forces and national partners to target and disrupt criminals posing the greatest risk of Serious and Organised Criminality (SOC). This includes offenders involved in cyber threats, economic crime, drug conspiracies, modern slavery and human trafficking, and child sexual abuse and exploitation.

Police staff in one of our five regional forces can find out more about the work of this team and read first-hand accounts of people working at SWROCU at https://www.southwestrocu.police.uk/

You can find out more about SWROCU on LinkedIn: https://www.linkedin.com/company/south-west-regional-organised-crime-unit-swrocu

We’re looking for committed people with the right skillset – or ambition to develop that skillset – to join us.

What we can offer you –

Flexible working – with many of our roles we can be flexible regarding working hours.

Continuous professional development – we encourage and support career growth, giving you the opportunity of a flourishing career.

Well-being support – we have many support mechanisms in place to assist in improving your personal health and wellbeing.

Skills, experience and qualifications required

Essential

The postholder will hold a degree or equivalent and be experienced in the specialist field of computer forensics or similar, together with a working knowledge of forensic based computer examination software packages.

Strong written and verbal communication skills, including presentation skills, the ability to handle difficult conversations and potentially hostile situations.

Excellent interpersonal skills and will have the ability to convey technical matters to a non-technical audience.

Working knowledge of legislation relating to the use, investigation and seizure of electronic material.

Effective decision making and the ability to influence others in the decision-making process.

The postholder will hold a full current driving license or be able to travel around the South West Region using alternative transport.

Desirable

Knowledge of relevant legislation such as Computer Misuse Act, ACPO Good Practice Guide for Digital Evidence and the Data Protection Act, together with a knowledge of malware, database construction, network investigation, forensic laboratory practices and procedures, evidence handling and court presentation would all be advantageous.

Experience of presenting evidence in court is also desirable.

Some flexibility in the pattern of working may be required to meet special demands of the duties of the post.

Recruitment and Selection

Recruitment webinar: Tuesday 18th August, 12:00

Hosted by the capability lead or a member of their team, this is an opportunity to find out more about the role, the team you would be part of, and ask any questions.

Please contact swrocurecruitment@avonandsomerset.police.uk, whereby invites will be sent accordingly. Please note that webinars will not be recorded

General Data Protection Regulation (GDPR) - we would like to make you aware that this webinar will be a group video call which may show your personal details, such as your name and email address, to other attendees on the call. Attendees also need to be mindful of the misuse of personal data and information displayed in the webinar.

The closing date for receipt of applications is: Tuesday 8th September, 09:00

Shortlisting will take place: Tuesday 8th September

Interviews will be held week commencing: TBC

How to Apply

All applications are processed through the Avon and Somerset Constabulary online Oleeo portal.

Contact SWROCURecruitment@avonandsomerset.police.uk for further information.

If you reach the assessment/ interview stage of a process and become a reserve applicant, we would like to retain your application. This will be pending further vacancies arising for the same role in a 6-month period. By giving your consent this does not prevent you from applying for any other opportunities.

Additional Information

Vetting and safeguarding

This post is subject to a higher security clearance at MV and SC – Management Vetting and Security Clearance Level.

To be eligible to apply for this role you must have a five-year ‘checkable history’ in the UK – ideally this means that you would have been resident in the UK for the last five years.

In accordance with the National Vetting Policy, SWROCU are committed to safeguarding and operate safer recruitment processes, to ensure a police service that employees are proud to work for because they feel safe, valued and part of a happy and supportive work environment. All employees and volunteers therefore will be subject to background checks including vetting and references.

Police Barred and Advisory lists

Individuals placed on the Police Barred and Advisory lists will not be considered for employment by the police for a minimum of five years from the date of listing in the case of gross misconduct, or three years from the date of listing in the case of poor performance.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.

See all cyber security & digital forensics jobs in Bristol

Why this fits a police background — match score 85/100

  • Police experience explicitly valued
  • Evidence & case files
  • Financial crime & fraud
  • Investigative casework
  • Digital forensics & cybercrime

What cyber security & digital forensics roles pay ex-police

Advertised UK ranges, editorial estimates reviewed July 2026

Digital forensics analyst£32,000–£45,000
DFIR consultant£45,000–£65,000
Senior forensics / IR specialist£60,000–£80,000
Threat-intelligence specialist£55,000–£80,000
Full cyber security & digital forensics salary guide →

More cyber security & digital forensics jobs for ex-police

  • Threat Analyst

    SCC · Birmingham

    Full-time

    Your background in intelligence analysis and threat assessment from policing maps directly to producing structured threat intelligence deliverables. You are used to researching hostile actors, evaluating sources, and writing concise briefings for different audiences, which is exactly what this role demands. Your incident response experience and disciplined approach to evidence and reporting would let you contribute from day one, while any gaps in specific tooling can be trained.

    Posted Today

  • Cyber Incident Responder

    CYFOR · Manchester

    Full-time

    £40,000 – £50,000Estimated

    Your experience investigating digital evidence and managing incidents in policing gives you a strong foundation for this role, particularly in forensic acquisition, log analysis, and producing evidential reports. The requirement for clear client communication and structured investigation aligns with your interview and case-file skills, though you would need to build specific technical knowledge of cloud environments and EDR tools.

    Posted Yesterday

  • Full-time

    This role focuses on information security management, risk assessment, and incident response — areas where your experience in operational policing, threat assessment, and managing critical incidents translates directly. Your background in following strict procedures, handling sensitive information, and coordinating multi-agency responses aligns well with the security governance and compliance aspects of the job. While the role requires specific technical cyber security knowledge, your investigative mindset and ability to work under pressure are strong foundations that employers in this sector

    Posted Yesterday

  • Full-time

    Your experience in policing has given you a strong foundation in risk assessment, threat identification, and incident management, which are directly applicable to IT risk management. You are used to working under pressure, making decisions based on incomplete information, and communicating complex risks to senior stakeholders. While you may need to develop specific technical knowledge of IT frameworks like ISO 31000 or NIST, your core skills in evaluating threats, implementing controls, and ensuring compliance are highly transferable to this role.

    Posted Yesterday