Manager - Digital Forensics and Incident Response

Scyne Advisory Pty; Sydney; Hybrid; AUD 170,000 - 210,000; Full time

Benefits offered by this job

Parental Leave 26 weeks

Flex working

Additional leave options

Smart device reimbursement

Wellness and lifestyle benefits

Sonder digital care platform

Job summary

Scyne Advisory Pty is seeking a Manager - Digital Forensics and Incident Response to lead high‑impact DFIR engagements for government and not-for-profit clients. You will deliver hands-on incident response, forensics and security operations, while guiding junior staff and coordinating with alliance partners.

You will work across networks, cloud environments (Azure/AWS/GCP) and data management tools, applying MITRE ATT&CK and NIST SP 800-61 frameworks.

Qualifications

• 5+ years of incident response, DFIR, or security operations experience.
• Hands-on skills with networks, cloud platforms (Azure, AWS, GCP), SaaS apps.
• Knowledge of DFIR data analysis and related tooling.
• Familiarity with MITRE ATT&CK and NIST SP 800-61.
• Ability to lead a small project and mentor juniors.
• Certifications: GCIH, GCFA, Security+, CIH or equivalent.

Responsibilities

• Leverage your DFIR skills to help clients respond to cyber incidents with hands-on support and expert advice.
• Follow recognised DFIR frameworks and practices, including MITRE ATT&CK and NIST guidelines.
• Work in highly sensitive, regulated environments across government and public sectors.
• Support growth and professional development of junior team members.
• Collaborate with peers and alliance partners to engage necessary capabilities for client needs.
• Contribute to development of new capabilities, products, and services.

Skills

Incident response

Digital forensics

Security operations

Cloud platforms

Data analysis

Education

GCIH

GCFA

Security+

CIH

Tools

MITRE ATT&CK

NIST SP 800-61

Job description

Manager - Digital Forensics and Incident Response

• Full-time
• Practice: Risk, Programs and Cyber
• Job Location: National
• Employment Type: Permanent Full Time
• Security Clearance: Yes

One purpose, one practice

We are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

Our purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices:

• Transformation
• Risk, Programs and Cyber
• Commercial, Financial and Infrastructure

The Team

OurCybercapability is a leader in trust-based services to the public and for-purpose sector, we are here to support clients whenever a concern or big decision arises. We support clients to achieve outcomes for communities that are increasingly seeking trusted sources of information around issues like organisational integrity, cyber risk, integrity of data, commitment to sustainability and climate change, as well as the efficiency and effectiveness of transformation programs.

Through our national security operations program, we apply our 'Plan | Practice | Perform' model to help our clients build the capability and confidence needed to successfully prepare for, respond to, and recover from a variety of cyber threats. This includes the provision offull-service 24/7 DFIR and Security Operations support to our clients, in both remote and on-site settings.

As a Manager - Digital Forensics and Incident Response,you will create value by:

• Leveraging your technical DFIR skills to help our clients respond to a variety of cyber incidents, providing clients withboth hands-on support and expert advice.
• Following recognised DFIR frameworks, methodology and practices, including applicable NIST frameworks, ISO/IEC 27035andMITRE ATT&CK.
• Working withinhighly sensitive and regulated environments, across a variety of government and public purpose sectors, adhering to relevant policies and procedures.
• Supporting the growth and professional development of more junior team members, as they expand their DFIR skills and experience.
• Working collaboratively with peers and teams across Scyne and our alliance partners, to ensure we engageall necessary capabilities to support clients' needs.
• Supporting the development of new capabilities, products and services based on market demand.

About you

Aligned to our values, you're collaborative in nature and love working in and celebrating as a team. You respect and care for your colleagues and are curious about others' views and reflect on the impact we have on others.

You have a growth mindset. You're interested in asking questions to challenge our thinking and love new ideas and trying new things. You're curious about and able to put yourself in the clients' shoes; you earn and value the trust placed in us.

You're someone who does what you say you'll do, and you do the right thing when no-one is looking, and you call it when you feel something isn't quite right.

Technically, you will bring to the position:

• 5+ years of proven industry experience working in incident response, digital forensics or security operations.
• A 'hands-on' set of technical skills in contemporary technologies including networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools.
• A sound base of knowledge on digital forensics and data analysis practices, as well as hands-on experience and capability with the tooling used to support these activities.
• A sound foundation in relevant industry frameworks such as MITRE ATT&CK and NIST SP 800-61.
• Basic project management skills and the proven ability to lead a team of people in the delivery of a small project.
• Qualifications and certifications in recognised and relevant industry accreditations such as GCIH, GCFA, Security+, CIH, or other related security operations certifications.
• The ability to participatein a 24/7on-call roster to support after-hours engagements and client response activities - including occassional after-hours office or client site attendance.
• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That's why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We'll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.