Hybrid Digital Forensics Analyst – DFIR & Incident Response

Forensic Focus; Melbourne; Hybrid; AUD 65,000 - 90,000; Full time

Job summary

Forensic Focus is seeking a Hybrid Digital Forensics Analyst (DFIR & Incident Response) in Melbourne. The role involves investigating cyber incidents for clients across Australia, identifying how intrusions occurred, threat actor activity, and data impact, supported by detailed written reporting.

Ideal candidates have at least one year in digital forensics, strong Windows/Linux artefact knowledge, and experience with chain-of-custody and evidence handling.

Qualifications

• Minimum 1 year in digital forensics.
• Strong Windows and Linux artefact knowledge.
• Forensically sound evidence handling with chain-of-custody experience.

Responsibilities

• Investigate cyber incidents for clients across Australia, determining intrusion methods, threat actor activity and data impact.
• Produce detailed written reporting for each engagement and retain documentation integrity.

Skills

Digital forensics

Windows artefacts

Linux artefacts

Evidence handling

Chain-of-custody

Education

GCFE/GCFA/GCFR or GCIH

Tools

Magnet AXIOM

X-Ways

KAPE

Velociraptor

Volatility

EDR/SIEM platforms

Job description

# Hybrid Digital Forensics Analyst – DFIR & Incident Response*Triskele Labs***Melbourne, Victoria**Hybrid · Junior · Full-time### The RoleYou investigate cyber incidents for clients across Australia, determining how intrusions occurred, threat actor activity, and data impact. Work spans reactive insurer-referred matters and proactive retainer engagements, covering ransomware, business email compromise, insider threats and more, each backed by detailed written reporting.### Skills & ExperienceAt least one year in digital forensics, strong Windows and Linux artefact knowledge, forensically sound evidence handling, and chain-of-custody experience. Tools include Magnet Axiom, X-Ways, KAPE, Velociraptor, Volatility and EDR/SIEM platforms. GCFE, GCFA, GCFR or GCIH certifications highly valued.### Who It SuitsSuits an analyst with foundational DFIR experience seeking to deepen technical casework within a specialised digital forensics team, comfortable with occasional out-of-hours response and eager for structured training and certification support.