Cybersecurity Lead Investigator

Forensic Focus; Australia; Remote; AUD 95,000 - 129,000; Full time

Job summary

Forensic Focus in Australia is seeking a Cybersecurity Lead Investigator to orchestrate end-to-end incident response engagements and set investigation objectives.

You will correlate evidence, build cohesive timelines, and serve as the primary technical contact for customers, including executives, legal and compliance teams, while coordinating threat hunters, reverse engineers and infrastructure specialists across global follow-the-sun operations.

Qualifications

• Experience in enterprise on-premises and cloud investigations.
• Advantage with Microsoft Defender technologies.
• Relevant degree forms the academic baseline; substantial hands-on incident response experience.

Responsibilities

• Lead end-to-end incident response engagements.
• Set investigation objectives and timelines.
• Correlate evidence and build cohesive timelines.
• Coordinate threat hunters, reverse engineers and infrastructure specialists across teams.

Skills

Incident response

Forensic analysis

Executive briefing

Mentoring

Education

Degree in Computer Science/Computer Security/Statistics or Mathematics

Tools

Microsoft Defender

Job description

# Cybersecurity Lead Investigator*Microsoft***Australia**Lead/Principal · Full-time### The RoleThe lead investigator orchestrates end-to-end incident response engagements, setting investigation objectives, correlating disparate evidence and building cohesive timelines. They serve as the primary technical point of contact for customers — including executives, legal and compliance teams — while coordinating threat hunters, reverse engineers and infrastructure specialists across global follow-the-sun operations.### Skills & ExperienceCandidates require deep technical expertise in enterprise on-premises and cloud environment investigations, adversary activity assessment, compromise scoping and data exfiltration analysis. Experience with Microsoft Defender technologies is advantageous. A relevant degree in Computer Science, Computer Security, Statistics or Mathematics forms the academic baseline, alongside substantial hands-on incident response experience.### Who It SuitsThis role suits a seasoned incident responder who combines strong forensic analytical judgement with the communication skills to brief executive stakeholders under pressure. Those who enjoy mentoring colleagues, shaping team methodology and operating within a globally distributed, mission-driven security organisation will thrive here.Typical advertised salary forIncident Response roles in Australia:**A$95,000–A$129,000**(median A$125,000 — from11 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Australia →Learn More/Apply