Digital Forensics Analyst - Hybrid Work & Growth

Triskele Labs; Melbourne; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Triskele Labs is an Australian cyber security firm delivering Managed Detection and Response, Governance Risk and Compliance, Penetration Testing, and Digital Forensics and Incident Response. We hold CREST CSIR accreditation.

We investigate cyber incidents for clients across Australia, remotely and on site. Every matter is backed by a written report that stands up to review by the client, their insurer and their legal counsel.

Qualifications

• At least 1 year of digital forensics experience.
• Understanding of the incident lifecycle.
• Strong knowledge of Windows/Linux forensic artefacts.
• Exposure to Microsoft 365 investigation is advantageous.
• Experience acquiring and handling evidence in a forensically sound manner, including chain of custody.
• Familiarity with Threat Actor tactics, techniques and procedures.
• Business-fluent written English.
• Eligibility to work in Australia.

Responsibilities

• Investigate cyber incidents for clients across Australia, remotely and on site.
• Establish how intrusions occurred, what the Threat Actor did, and whether data was accessed or taken.
• Produce written reports that stand up to review by clients, insurers and legal counsel.
• Work alongside a highly technical and seasoned group of digital forensics practitioners.
• Contribute to investigations of ransomware, data extortion, BEC, insider threat and data theft.

Skills

Digital forensics

Incident lifecycle

Windows/laptop artefacts

Windows/Linux artefacts

Microsoft 365 investigation

Evidence handling & chain of custody

Threat actor TTPs

Business English

Work eligibility Australia

1+ year experience

Tools

Magnet Axiom

X-Ways Forensics

Intella

KAPE

EZ Tools

Hayabusa

Velociraptor

Chainsaw

Volatility

SentinelOne

CrowdStrike

Microsoft Defender

Carbon Black

Microsoft Sentinel

Elastic

Rapid7

Job description

Triskele Labs is an Australian cyber security firm delivering Managed Detection and Response, Governance Risk and Compliance, Penetration Testing, and Digital Forensics and Incident Response. We hold CREST CSIR accreditation.

We investigate cyber incidents for clients across Australia, remotely and on site. Every matter is backed by a written report that stands up to review by the client, their insurer and their legal counsel.