Digital Forensics & Incident Response Analyst

Triskele Labs; Melbourne; Hybrid; AUD 95,000 - 130,000; Full time

Benefits offered by this job

Annual training budget

Hybrid working

Onshore team

Job summary

Triskele Labs in Melbourne is seeking a dedicated digital forensics and incident response professional to join our onshore DFIR team. From day one you will handle live incidents including ransomware, BEC, and unauthorized access, acquiring and preserving evidence, building the timeline, and generating reports relied upon by executives and insurers.

You will collaborate with incident responders, panel law firms and insurers, shaping forensic playbooks, mentoring junior analysts, and ensuring

Qualifications

• 3+ years hands-on digital forensics or IR with end-to-end case work.
• Experience with industry forensic tools listed.
• Experience in Windows AD and at least one major cloud platform.
• Written forensic reports relied on by clients or insurers.
• Australian citizenship required for government work.

Responsibilities

• Own evidence acquisition and preservation across endpoints, servers, cloud tenants and mobile devices, maintaining chain of custody.
• Conduct disk, memory, log and cloud forensic analysis to reconstruct attacker activity and data exfiltration.
• Perform data impact assessments to support notification decisions under the Privacy Act and SOCI Act.
• Write clear, defensible forensic reports and present findings to executives, legal counsel, insurers and law enforcement.
• Support containment and recovery alongside incident responders and SOC analysts.
• Contribute to retainer and readiness work including tabletop exercises and readiness reviews.
• Improve forensic tooling, automation and case documentation standards.

Skills

Digital forensics

Incident response

Forensic reporting

Windows forensics

Cloud investigations

Tools

EnCase

FTK

X-Ways

Magnet AXIOM

Velociraptor

KAPE

Plaso

Volatility

Job description

Triskele Labs in Melbourne is seeking a dedicated digital forensics and incident response professional to join our onshore DFIR team. From day one you will handle live incidents including ransomware, BEC, and unauthorized access, acquiring and preserving evidence, building the timeline, and generating reports relied upon by executives and insurers.

You will collaborate with incident responders, panel law firms and insurers, shaping forensic playbooks, mentoring junior analysts, and ensuring