Global DFIR Incident Responder & Forensics Expert

Forensic Focus; Australia; On-site; AUD 90,000 - 130,000; Full time

Job summary

Forensic Focus is seeking a DFIR expert to join our global incident response team in Australia. You will perform live-endpoint and offline forensic investigations, identify key artifacts, and guide remediation across on-prem and cloud environments.

You will contribute to developing IR methodologies, documentation, and our ticketing system while collaborating with third parties on breaches and business email compromise cases. This fast-paced, metrics-driven role suits a proactive practitioner.

Qualifications

• 2–3 years of DFIR experience.
• Experience with EDR deployment and management.
• Familiar with the NIST Cybersecurity Framework.
• Experience with SIEM, firewalls, VPNs, virtualization, and networking technologies.
• Forensic investigations in on-premises and cloud environments.
• Certifications such as GCIH/GCFE are preferred.

Responsibilities

• Perform live-endpoint and offline forensic investigations.
• Identify key artifacts to guide remediation.
• Contribute to developing IR methodologies and documentation.
• Maintain a ticketing system and track findings.
• Collaborate with third parties on breaches and business email compromise cases.

Skills

DFIR experience

EDR deployment

NIST framework familiarity

SIEM

firewalls

VPNs

virtualization

networking technologies

Education

GCIH certification

GCFE certification

Tools

EDR

SIEM

firewalls

VPNs

virtualization

networking

Job description

Forensic Focus is seeking a DFIR expert to join our global incident response team in Australia. You will perform live-endpoint and offline forensic investigations, identify key artifacts, and guide remediation across on-prem and cloud environments.

You will contribute to developing IR methodologies, documentation, and our ticketing system while collaborating with third parties on breaches and business email compromise cases. This fast-paced, metrics-driven role suits a proactive practitioner.