Hybrid DFIR Analyst - Incident Response & Forensics

Forensic Focus; Melbourne; Hybrid; AUD 65,000 - 90,000; Full time

Job summary

Forensic Focus is seeking a Hybrid Digital Forensics Analyst (DFIR & Incident Response) in Melbourne. The role involves investigating cyber incidents for clients across Australia, identifying how intrusions occurred, threat actor activity, and data impact, supported by detailed written reporting.

Ideal candidates have at least one year in digital forensics, strong Windows/Linux artefact knowledge, and experience with chain-of-custody and evidence handling.

Qualifications

• Minimum 1 year in digital forensics.
• Strong Windows and Linux artefact knowledge.
• Forensically sound evidence handling with chain-of-custody experience.

Responsibilities

• Investigate cyber incidents for clients across Australia, determining intrusion methods, threat actor activity and data impact.
• Produce detailed written reporting for each engagement and retain documentation integrity.

Skills

Digital forensics

Windows artefacts

Linux artefacts

Evidence handling

Chain-of-custody

Education

GCFE/GCFA/GCFR or GCIH

Tools

Magnet AXIOM

X-Ways

KAPE

Velociraptor

Volatility

EDR/SIEM platforms

Job description

Forensic Focus is seeking a Hybrid Digital Forensics Analyst (DFIR & Incident Response) in Melbourne. The role involves investigating cyber incidents for clients across Australia, identifying how intrusions occurred, threat actor activity, and data impact, supported by detailed written reporting.

Ideal candidates have at least one year in digital forensics, strong Windows/Linux artefact knowledge, and experience with chain-of-custody and evidence handling.