Digital Forensics (DFIR) / Incident Response Analyst

Forensic Focus; Sydney; Hybrid; AUD 95,000 - 129,000; Full time

Job summary

Forensic Focus, in collaboration with Check Point Software, seeks a Senior DFIR/ Incident Response Analyst in Sydney to lead hands-on incident management for enterprise clients.

You will conduct forensic analysis of compromised systems, build IR plans and playbooks, create tabletop scenarios, and maintain malware sandbox environments to support rapid containment and remediation.

Qualifications

• 7+ years in cybersecurity and 2–5 years in Tier 3 incident response.
• Proven ability to analyze compromised systems and conduct vulnerability assessments.
• Experience with enterprise security platforms and attack simulations.

Responsibilities

• Hands-on daily incident management for enterprise customers.
• Perform forensic analysis of compromised systems and large-scale assessments.
• Produce detailed incident reports and develop IR plans and playbooks.
• Create tabletop training scenarios and maintain malware sandbox environments.

Skills

Cybersecurity

Incident response

Forensic analysis

Network security

Weekend on-call

Customer communication

Tools

Magnet Axiom

Enterprise security platforms

Attack simulation

Job description

# Digital Forensics (DFIR) / Incident Response Analyst*Check Point Software***Sydney, New South Wales**Onsite · Senior · Full-time### The RoleThis position involves hands-on daily incident management for enterprise customers, conducting forensic analysis of compromised systems, performing large-scale compromise assessments, and producing detailed incident reports. The analyst also builds IR plans and playbooks, creates tabletop training scenarios, and maintains sandbox environments for malware evaluation.### Skills & ExperienceCandidates need 7+ years in cybersecurity with 2–5 years of Tier 3 incident response, strong experience in system compromise analysis, network vulnerability assessments, and familiarity with Magnet Axiom. Experience with enterprise security platforms, attack simulation, and on-call availability including weekend rotations is required.### Who It SuitsThis role suits a seasoned DFIR professional comfortable operating independently across complex, global incidents and communicating technical findings clearly to customers. Those who enjoy a mix of hands-on forensics, advisory work, and team coordination in a fast-paced security consultancy environment will thrive here.Typical advertised salary forIncident Response roles in Australia:**A$95,000–A$129,000**(median A$125,000 — from11 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Australia →Learn More/Apply