Lead DFIR Analyst - Complex Investigations

Infotrust; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible, hybrid working

Job summary

Infotrust is seeking a Principal Analyst to join our Digital Forensics & Incident Response (DFIR) team in Sydney. You will lead complex investigations, articulate your reasoning, and guide best practices across engagements with legal and client stakeholders.

You will bring 8+ years of hands-on DFIR experience across Windows, macOS, Linux/Unix, cloud services, and mobile forensics, with strong scripting and communication skills. Hybrid work arrangements are supported.

Qualifications

• 8+ years hands-on DFIR experience across Windows/macOS/Linux, cloud and mobile.
• Forensic acquisition/analysis of file systems, memory and artefacts.
• SIEM/EDR data interpretation and cloud-native investigations.
• Scripting for automation and evidence processing.
• Confident communicator, able to justify expert opinion in court.
• Detail-oriented, calm under pressure, collaborative with clients.

Responsibilities

• Lead complex investigations and high-impact cyber incidents.
• Provide definitive written and oral advice on forensic matters.
• Direct leading-edge research and develop DFIR techniques and tools.
• Establish technical standards, service models and training.
• Manage multidisciplinary projects with internal and external stakeholders.
• Contribute to business development and market engagement.

Skills

DFIR expertise

Windows

macOS

Linux/Unix

Cloud forensics

Mobile forensics

SIEM/EDR analysis

CrowdStrike

Python scripting

PowerShell/Bash

Court testimony

Tools

ELK

Splunk

CrowdStrike

Job description

Infotrust is seeking a Principal Analyst to join our Digital Forensics & Incident Response (DFIR) team in Sydney. You will lead complex investigations, articulate your reasoning, and guide best practices across engagements with legal and client stakeholders.

You will bring 8+ years of hands-on DFIR experience across Windows, macOS, Linux/Unix, cloud services, and mobile forensics, with strong scripting and communication skills. Hybrid work arrangements are supported.