Remote DFIR Analyst — Client-Facing Incident Response

Launch Recruitment; Melbourne; Remote; AUD 95,000 - 130,000; Full time

Benefits offered by this job

Remote work

Job summary

Launch Recruitment is partnering with a global cyber security organisation to hire an experienced DFIR Analyst. The role is fully remote within Australia, with one other team member based in Victoria, and involves client-facing incident response across multiple environments.

You will investigate security incidents, lead forensic activities, and help clients strengthen their cyber resilience through tabletop exercises and practical remediation guidance.

Qualifications

• Minimum 2–3 years in DFIR or a dedicated incident response role.
• Experience investigating Business Email Compromise (BEC) incidents.
• Experience across on‑premise and cloud environments.
• Hands-on experience with EDR, SIEM and forensic investigation tools.
• Strong communication skills, able to explain complex security issues to clients.

Responsibilities

• Lead and support DFIR investigations across endpoints, networks, cloud and enterprise environments.
• Perform incident triage, containment, eradication and remediation activities.
• Investigate and respond to BEC incidents, including compromised accounts and phishing attempts.
• Develop incident reports with findings and remediation recommendations.
• Present findings to clients and assist in tabletop exercises.

Skills

DFIR Experience

BEC Incidents

Client Engagement

Incident Triage

Investigation

Remediation

Communication Skills

Tools

EDR tools

SIEM

Forensic Tools

Job description

Launch Recruitment is partnering with a global cyber security organisation to hire an experienced DFIR Analyst. The role is fully remote within Australia, with one other team member based in Victoria, and involves client-facing incident response across multiple environments.

You will investigate security incidents, lead forensic activities, and help clients strengthen their cyber resilience through tabletop exercises and practical remediation guidance.