Lead Incident Response Commander (Cloud & Forensics)

Cox Purtell; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Cox Purtell is seeking a senior incident commander for a 12-month Sydney contract with a global software company. You will lead the most complex security incidents from first alert to closure while performing the forensic investigation yourself across web applications, APIs, containers and multi-cloud infrastructure.

Join a cyber defence centre that values sound judgement, technical depth and mentoring, and help shape incident response processes, tooling and exercises while briefing senior

Qualifications

• Extensive front-line incident response and digital forensics experience across many major incidents.
• Hands-on investigation of web applications, APIs, cloud and container compromises.
• Experience with cloud-native forensics across Kubernetes, AWS and GCP.
• Willingness to join on-call rotation and respond to critical events.

Responsibilities

• Command complex security incidents across the full response lifecycle with coordination of internal and external teams.
• Personally investigate web apps, APIs, cloud and container compromises and credential/data-exposure scenarios.
• Collect, preserve and analyse forensic evidence across hosts, networks and cloud platforms.
• Brief senior leadership under pressure and drive remediation across teams and organisations.
• Build tooling for evidence collection at scale and lead training and mentoring for responders.

Skills

Incident response

Digital forensics

Leadership

Cloud incident response

Tools

Kubernetes

AWS

GCP

CrowdStrike Falcon

Job description

Cox Purtell is seeking a senior incident commander for a 12-month Sydney contract with a global software company. You will lead the most complex security incidents from first alert to closure while performing the forensic investigation yourself across web applications, APIs, containers and multi-cloud infrastructure.

Join a cyber defence centre that values sound judgement, technical depth and mentoring, and help shape incident response processes, tooling and exercises while briefing senior