Principal DFIR Consultant - Build Australia Practice

The Cache Group; Sydney; On-site; AUD 180,000 - 260,000; Full time

Job summary

The Cache Group is recruiting a Principal DFIR Consultant to establish and lead the Australian arm of the Digital Forensics and Incident Response practice from Sydney CBD. You will report to and collaborate with a Tasman-based DFIR team and help shape the service, methodology and growth of the Australian practice.

This senior, hands-on role focuses on end-to-end incident response, relationship-building with insurers and law firms, and presenting findings to executives.

Qualifications

• 8+ years in cyber security, with a substantial DFIR component.
• Senior, hands-on incident response experience, ideally in a consultancy or MSSP
• Clear report writing, and able to explain findings to non-technical audiences
• Eligible for an Australian security clearance; Baseline is sponsored
• CrowdStrike and Microsoft Defender for Endpoint experience is highly regarded
• GCFA, GCFE, GCIH or similar is advantageous; proven experience counts more
• Expert witness experience is desirable

Responsibilities

• Lead incident response engagements end to end, from scoping to final report
• Hunt at scale with Velociraptor and run host, memory and log forensics
• Build on relationships with cyber insurers, IR law firms and partners
• Present findings to technical teams, legal counsel and executives
• Help shape the trans-Tasman service, methodology and team

Skills

DFIR experience

Incident response

Independent work

Report writing

Security clearance

CrowdStrike

Defender for Endpoint

GCFA/GCFE/GCIH

Expert witness

Tools

CrowdStrike

Microsoft Defender for Endpoint

Job description

The Cache Group is recruiting a Principal DFIR Consultant to establish and lead the Australian arm of the Digital Forensics and Incident Response practice from Sydney CBD. You will report to and collaborate with a Tasman-based DFIR team and help shape the service, methodology and growth of the Australian practice.

This senior, hands-on role focuses on end-to-end incident response, relationship-building with insurers and law firms, and presenting findings to executives.