Incident Response Analyst

Forensic Focus; Australia; Remote; AUD 95,000 - 129,000; Full time

Job summary

Forensic Focus in Australia seeks an experienced Incident Response Analyst to lead investigations into active cyber incidents for managed detection and response customers. You will analyse malware and ransomware activity, contain threats, document findings, and collaborate with threat hunting and detection engineering teams to refine investigative approaches.

The role requires 3+ years in cyber threat investigations, strong endpoint and network forensics across Windows, macOS and Linux, and

Qualifications

• 3+ years investigating cyber threats.
• Familiarity with endpoint and network forensics across Windows, macOS and Linux.
• Experience with EDR/IDS/IPS tools.
• Scripting skills.
• Knowledge of MITRE ATT&CK framework.

Responsibilities

• Lead investigations into active cyber incidents for MDR customers.
• Analyse malware and ransomware activity.
• Contain threats and document findings.
• Collaborate with threat hunting and detection engineering teams to refine investigation approaches.

Skills

Threat investigation

Forensics (endpoint/network)

EDR/IDS/IPS tools

Scripting

MITRE ATT&CK knowledge

Education

GCIH

Security+

Job description

# Incident Response Analyst*Sophos***Australia**Remote · Mid · Full-time### The RoleThis position involves leading investigations into active cyber incidents for managed detection and response customers. Responsibilities include analysing malware and ransomware activity, containing threats, documenting findings, and collaborating with threat hunting and detection engineering teams to refine investigative approaches.### Skills & ExperienceCandidates need 3+ years investigating cyber threats, familiarity with endpoint and network forensics across Windows, macOS and Linux, EDR/IDS/IPS tools, scripting, and frameworks like MITRE ATT&CK. Certifications such as GCIH or Security+ are valued.### Who It SuitsSuited to experienced incident responders comfortable working under pressure, communicating directly with customers, and bridging junior and senior analysts within a remote-first security operations environment.Typical advertised salary forIncident Response roles in Australia:**A$95,000–A$129,000**(median A$125,000 — from11 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Australia →Certifications mentioned:GCIH · Security+ — find training for these on theDFIR Training Finder.Learn More/Apply