Digital Forensics & Incident Response Specialist (DFIR)

Talenza; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid working environment

Ongoing professional development

Career progression opportunities

Job summary

Talenza is seeking a senior Digital Forensics, DFIR and Incident Response expert to join a mature security function in Sydney. You will lead complex investigations, shape capabilities, and mentor junior staff while hands‑on in forensic work across endpoints, networks, and cloud environments.

You will also drive improvements in tooling and processes, collaborate with IR, threat defence, and SOC teams, and communicate findings to diverse stakeholders.

Qualifications

• 5+ years in Digital Forensics, DFIR, Incident Response, or Cyber Investigations.
• Experience conducting complex forensic investigations across endpoints, networks, cloud environments, and digital evidence sources.
• Expertise in malware analysis, memory forensics, threat hunting, and forensic evidence collection methodologies.
• Hands‑on experience with security technologies including SIEM, EDR, IDS/IPS, and DLP platforms.
• Relevant industry certifications such as GCFA, GCFE, EnCE, CFCE, MCFE, or equivalent.

Responsibilities

• Lead high‑priority cyber incidents, providing technical guidance and investigation support.
• Coordinate forensic investigations, identifying root cause, attack methods, and remediation opportunities.
• Drive improvements in forensic tooling, automation, methodologies, and overall forensic readiness.
• Partner with Incident Response, Threat Defence, and Security Operations teams to strengthen detection and response capabilities.
• Mentor junior analysts and contribute to training, knowledge sharing, and quality assurance of forensic investigations.

Skills

Digital forensics

DFIR

Incident response

Threat hunting

Memory forensics

Malware analysis

Education

GCFA

GCFE

EnCE

CFCE

MCFE

Tools

SIEM

EDR

IDS/IPS

DLP

Job description

• Join a large, globally recognised organisation investing heavily in its cyber security capability and resilience.
• Work within a mature security function that operates across multiple regions, technologies, and business units.
• Be part of a collaborative environment where cyber security is viewed as a strategic business priority, with strong backing from senior leadership.

About the Company

• Join a large, globally recognised organisation investing heavily in its cyber security capability and resilience.
• Work within a mature security function that operates across multiple regions, technologies, and business units.
• Be part of a collaborative environment where cyber security is viewed as a strategic business priority, with strong backing from senior leadership.

About the Role

This role will see you acting as a technical subject matter expert across digital forensics and incident response, leading complex investigations and helping shape the organisation's capabilities.

You’ll be responsible for conducting advanced forensic investigations, supporting major security incidents, enhancing forensic tools and processes, and partnering closely with incident response, threat defence, and security operations teams. This position is ideal for someone who enjoys hands‑on technical work while also mentoring others and driving continuous improvement.

Experience Required

• 5+ years' experience in Digital Forensics, DFIR, Incident Response, or Cyber Investigations.
• Strong experience conducting complex forensic investigations across endpoints, networks, cloud environments, and digital evidence sources.
• Expertise in malware analysis, memory forensics, threat hunting, and forensic evidence collection methodologies.
• Hands‑on experience with security technologies including SIEM, EDR, IDS/IPS, and DLP platforms.
• Relevant industry certifications such as GCFA, GCFE, EnCE, CFCE, MCFE, or equivalent.
• Proven ability to communicate technical findings to both technical and non-technical stakeholders and mentor junior team members.

Role Accountabilities

• Lead high‑priority cyber incidents, providing technical guidance and investigation support.
• Lead and coordinate forensic investigations, identifying root cause, attack methods, and remediation opportunities.
• Drive improvements in forensic tooling, automation, methodologies, and overall forensic readiness.
• Partner with Incident Response, Threat Defence, and Security Operations teams to strengthen detection and response capabilities.
• Mentor junior analysts and contribute to training, knowledge sharing, and quality assurance of forensic investigations.

Benefits

• Opportunity to work on complex and high-profile cyber investigations within a mature security environment.
• Strong investment in professional development, certifications, and ongoing technical training.
• Hybrid working environment with excellent long‑term career progression opportunities within a growing cyber security function.