Manager - Digital Forensics and Incident Response

Scyne Advisory Pty; Adelaide; Remote; AUD 150,000 - 230,000; Full time

Benefits offered by this job

Parental Leave 26 weeks

Superannuation contributions

Flex working

Additional leave

Smart device reimbursement

Wellness budget

Sonder

Job summary

Scyne Advisory Pty is seeking a Manager for Digital Forensics and Incident Response to lead DFIR engagements for government and public sector clients. You will apply hands-on incident response and forensics skills across networks, cloud environments, and data tools, while guiding junior staff and ensuring adherence to security frameworks.

You will operate in regulated environments, collaborate across Scyne and partners, and help shape new DFIR capabilities to meet evolving client needs and

Qualifications

• 5+ years in incident response, digital forensics or security operations.
• Hands-on skills across networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools.
• Knowledge of digital forensics and data analysis practices with related tooling.
• Familiar with MITRE ATT&CK and NIST SP 800-61 guidelines.
• Basic project management and ability to lead a small project.
• Certifications such as GCIH, GCFA, Security+, CIH or equivalent.
• Willingness to participate in a 24/7 on-call roster.

Responsibilities

• Leverage DFIR skills to respond to cyber incidents with hands-on support and expert guidance.
• Follow DFIR frameworks (MITRE ATT&CK, NIST) in regulated environments.
• Work with government/public sector clients, adhering to policies and procedures.
• Mentor and develop junior team members in DFIR activities.
• Collaborate with Scyne and alliance partners to deliver client solutions.
• Contribute to development of new DFIR capabilities and services.

Skills

DFIR experience

Networks

Cloud platforms

SaaS applications

End user compute

Data management tools

MITRE ATT&CK

NIST SP 800-61

Project management

24/7 on-call readiness

Education

Security certifications (GCIH/GCFA/Security+)

Tools

Azure

AWS

GCP

DFIR tooling

Job description

Manager - Digital Forensics and Incident Response

• Full-time
• Practice: Risk, Programs and Cyber
• Job Location: National
• Employment Type: Permanent Full Time
• Security Clearance: Yes

One purpose, one practice

We are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

Our purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices:

• Transformation
• Risk, Programs and Cyber
• Commercial, Financial and Infrastructure

The Team

OurCybercapability is a leader in trust-based services to the public and for-purpose sector, we are here to support clients whenever a concern or big decision arises. We support clients to achieve outcomes for communities that are increasingly seeking trusted sources of information around issues like organisational integrity, cyber risk, integrity of data, commitment to sustainability and climate change, as well as the efficiency and effectiveness of transformation programs.

Through our national security operations program, we apply our 'Plan | Practice | Perform' model to help our clients build the capability and confidence needed to successfully prepare for, respond to, and recover from a variety of cyber threats. This includes the provision offull-service 24/7 DFIR and Security Operations support to our clients, in both remote and on-site settings.

As a Manager - Digital Forensics and Incident Response,you will create value by:

• Leveraging your technical DFIR skills to help our clients respond to a variety of cyber incidents, providing clients withboth hands-on support and expert advice.
• Following recognised DFIR frameworks, methodology and practices, including applicable NIST frameworks, ISO/IEC 27035andMITRE ATT&CK.
• Working withinhighly sensitive and regulated environments, across a variety of government and public purpose sectors, adhering to relevant policies and procedures.
• Supporting the growth and professional development of more junior team members, as they expand their DFIR skills and experience.
• Working collaboratively with peers and teams across Scyne and our alliance partners, to ensure we engageall necessary capabilities to support clients' needs.
• Supporting the development of new capabilities, products and services based on market demand.

About you

Aligned to our values, you're collaborative in nature and love working in and celebrating as a team. You respect and care for your colleagues and are curious about others' views and reflect on the impact we have on others.

You have a growth mindset. You're interested in asking questions to challenge our thinking and love new ideas and trying new things. You're curious about and able to put yourself in the clients' shoes; you earn and value the trust placed in us.

You're someone who does what you say you'll do, and you do the right thing when no-one is looking, and you call it when you feel something isn't quite right.

Technically, you will bring to the position:

• 5+ years of proven industry experience working in incident response, digital forensics or security operations.
• A ‘hands-on’ set of technical skills in contemporary technologies including networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools.
• A sound base of knowledge on digital forensics and data analysis practices, as well as hands-on experience and capability with the tooling used to support these activities.
• A sound foundation in relevant industry frameworks such as MITRE ATT&CK and NIST SP 800-61.
• Basic project management skills and the proven ability to lead a team of people in the delivery of a small project.
• Qualifications and certifications in recognised and relevant industry accreditations such as GCIH, GCFA, Security+, CIH, or other related security operations certifications.
• The ability to participatein a 24/7on-call roster to support after-hours engagements and client response activities - including occassional after-hours office or client site attendance.
• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That's why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We'll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.