Cybersecurity Forensics Associate Specialist

Forensic Focus Limited; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

The Forensic Focus Limited is seeking a seasoned digital forensics and incident response expert to lead advanced investigations in a large corporate security program. You will drive memory forensics, malware analysis, and develop forensic methodologies while guiding junior analysts.

You will collaborate with global security teams, automate workflows, and deliver clear findings to stakeholders, including off-hours escalations as needed.

Qualifications

• 5+ years in digital forensics and incident response, with certifications such as GCFA, GCFE, EnCE, CFCE or equivalent.
• Proficiency with forensic tooling, SIEM, EDR, IDS/IPS and DLP is required, plus strong report writing and stakeholder presentation skills.

Responsibilities

• Lead advanced digital investigations and malware analysis in a large corporate environment.
• Develop forensic methodologies, automate workflows, and deliver findings to stakeholders.

Skills

Digital forensics

Incident response

Report writing

Stakeholder presentation

Tools

SIEM

EDR

IDS/IPS

DLP

Job description

The Role

The specialist serves as the forensic subject matter expert, leading advanced digital investigations, conducting malware analysis and memory forensics, and collaborating closely with incident response teams. The role also involves developing forensic methodologies, automating workflows, delivering findings to stakeholders, and participating in off‑hours escalations.

Skills & Experience

Candidates need 5+ years in digital forensics and incident response, supported by certifications such as GCFA, GCFE, EnCE, CFCE or equivalent. Proficiency in forensic tooling, SIEM, EDR, IDS/IPS and DLP is required, alongside strong report writing and stakeholder presentation skills.

Who It Suits

This role suits an experienced forensics professional ready to step into an SME position within a large corporate environment. Those who enjoy both hands‑on technical investigation and guiding junior analysts will thrive, as will candidates comfortable operating across global, cross-functional security teams.