Incident Response Engineer

K&L Gates; Sydney; Presencial; AUD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Structured mentoring

Flexible working

26 weeks paid parental leave

Momentum Program

Salary continuance insurance

Social events

Descripción de la vacante

K&L Gates is seeking an Incident Response Engineer in Sydney to support and enhance the firm’s cyber security incident response capabilities. You will investigate potential incidents, analyze adversary activity, and help protect IT assets across the firm.

You will contribute to designing and maintaining incident response platforms and processes that enable rapid, effective responses to cyber security events.

Formación

• Minimum of two years' experience in a technical or cybersecurity-related role.
• Bachelor's degree in Information Technology, Cyber Security, Computer Science, or a related discipline.
• Hands-on experience with CrowdStrike Falcon and related components (Falcon InsightXDR, RTR, Identity Threat Detection, NG-SIEM, Falcon Forensics).
• Proficiency with Microsoft Purview Insider Risk Management and related configurations.
• Familiarity with UEBA concepts and insider threat detection.
• Knowledge of digital forensics across endpoints, networks, email and cloud.

Responsabilidades

• Conduct digital forensic investigations and examinations.
• Analyse files and systems for malicious activity, including malware analysis.
• Investigate potential cybersecurity incidents and suspected breaches.
• Lead or support containment and recovery after intrusions.
• Document findings and present incident reports to senior stakeholders.
• Collaborate with technical teams to assess risks and respond to threats.
• Contribute to incident response process improvements and reporting.

Conocimientos

Cybersecurity experience

Incident response

Analytical thinking

Team collaboration

Problem solving

Educación

Bachelor's degree in IT/Cyber Security/CS

Herramientas

CrowdStrike Falcon

Purview Insider Risk Management

EnCase

FTK

X-Ways

Axiom

Velociraptor

Descripción del empleo

DISCOVERmoreopportunities toDEVELOPyour talentsandTHRIVEin a dynamic legallandscape.

Aboutthe role

As an Incident Response Engineer, you will be responsible for supportingand enhancing the firm's cyber security incident responsecapabilities. Working closely with Digital and Technologycolleagues and technical teams across the business, you willinvestigate potential security incidents, identify adversaryactivity, and help protect the integrity of the firm's informationtechnology assets.

You will alsocontribute to the design and maintenance of incident responseplatforms and processes that enable rapid and effective responsesto cyber security events.

Whatdoes the role involve?

• Conductdigital forensic investigations and examinations.
• Analysefiles and systems for malicious activity, including malwareanalysis.
• Investigate potentialcyber security incidents and suspected breaches.
• Anticipate threat actorbehaviour and recommend appropriatecountermeasures.
• Lead orsupport containment and recovery efforts following networkintrusions.
• Documentfindings and present incident reports to seniorstakeholders.
• Supportdata collection activities for client transfers and internaleDiscovery matters.
• Collaborate withtechnical teams to assess risks and respond to emergingthreats.
• Contribute to thecontinuous improvement of incident response procedures,documentation, and reporting metrics.

Aboutyou

We value ourculture at K&L Gates and are proud of our friendly andrespectful reputation. We are looking for a likeminded individualwho is able to work collaboratively in a team to get thingsdone.

You should bepractical, resilient and proactive in your approach in addition todemonstrating strong problem-solving skills, attention to detailand work well in a team.

To besuccessful in this role, you will bring:

• Aminimum of two years' experience in a technical or cybersecurity-related role.
• Bachelor's degree inInformation Technology, Cyber Security, Computer Science, or arelated discipline.
• Hands-onexperience with CrowdStrike Falcon, including Falcon InsightXDR, Real-Time Response (RTR), Identity Threat Detection,NG-SIEM, and Falcon Forensics.
• Proficiency withMicrosoft Purview Insider Risk Management, including policyconfiguration, alert triage, case management, adaptiveprotection, and Activity Explorer.
• Strong understanding of UEBA (User and Entity BehaviourAnalytics) concepts and behavioural indicator development.
• Experience building andtuning insider threat detection use cases and risk scoringframeworks.
• Proficiency in digitalforensics across endpoint, network, email, and cloud, onWindows, macOS, and Linux.
• Familiarity withforensic tools such as EnCase, FTK, X-Ways, Axiom, orVelociraptor.
• Knowledge of DLP (DataLoss Prevention) integration with insider threatworkflows.
• Abilityto correlate endpoint, identity, email, and cloud signals toidentify insider risk patterns.
• Experience coordinatingwith Legal, HR, Privacy, and Compliance stakeholders duringinsider investigations.
• Understanding of legalhold procedures, chain-of-custody documentation, and evidencehandling standards.
• Knowledge of regulatoryand compliance frameworks such as GDPR, ISO 42001, and ISO2700.

Theextras

K&L Gatespromotes equal opportunities for all employees to progress in theircareers.

Initiativesinclude:

• Structured mentoringprogram
• Flexibleworking options
• 26 weekspaid parental leave
• MomentumProgram for women and men who are taking a period of parentalleave and wish to stay on career track
• Salarycontinuance insurance
• Socialevents - social club and sporting teams

AboutUs

K&L Gatesis a fully integrated global law firm with lawyers located acrossNorth America, Europe, Asia, Australia and the Middle East. InAustralia, we have offices in Sydney, Melbourne, Brisbane andPerth, providing clients with deep local market knowledge supportedby the resources and reach of a global platform.

At K&LGates, collaboration is at the heart of everything we do. Ourlawyers work seamlessly across practices, offices and jurisdictionsto deliver innovative and practical solutions for clients. Wefoster an inclusive, high-performing culture where individuals areempowered to grow their careers while contributing to meaningfulwork for leading organisations across Australia and around theworld.

Doyou like what you see?

Referrals fromagencies are not accepted at this time.

K&LGates reserve the right to close advertising earlier at our discretion.

K&LGates is an equal opportunity employer and promotes the safety,wellbeing and inclusion of those with a disability. We welcomeapplications from people who have an Indigenous and/or culturallyand linguistically diverse background.

Stay safewhen applying on-line and be aware of jobs and employment relatedscams via scamwatch.gov.au