Remote DFIR Analyst: Incident Response & Forensics

CyberClan; Australia; Remote; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Wellness Leave

Birthday Day

Superannuation

Extended Health Benefits

Job summary

CyberClan in Australia is seeking a DFIR Incident Responder to join a 24x7/365 service delivery team. You will support a wide range of technologies, perform advanced troubleshooting (packet captures, debugs, traffic analysis) and help develop IR lifecycles and post‑breach remediation policies.

Requires 2–3 years in DFIR, experience deploying EDR, knowledge of NIST frameworks, and forensic investigations on‑premises and cloud.

Qualifications

• Minimum 2-3 years of experience in DFIR.
• Experience deploying and managing EDR technology.
• Experience with security technologies and the NIST Framework.
• Developing, documenting and implementing incident response methods and processes.
• Perform live endpoint investigations.
• Experience in forensic investigations on-premises and cloud.
• Available to provide coverage to meet business requirements in 3 regions.
• Strong knowledge of DFIR tools.
• Strong knowledge of Virtualization technologies, OS, firewalls, VPNs, SIEM.
• Enterprise gateway technologies, networking devices, security technologies, etc.

Responsibilities

• Support a wide range of technologies and perform advanced troubleshooting (packet captures, debugs, traffic analysis).
• Develop and document Incident Response methods and guidelines.
• Perform live-endpoint investigations and provide remediation actions.
• Implement a ticketing system to improve incident tracking and metrics.
• Collaborate with third parties for incident response, BEC, security breaches and remediation.
• Develop high-level technical reports for clients.
• Be part of a 24x7/365 service delivery team handling IR, remediation and root-cause analysis.

Skills

DFIR

EDR deployment

NIST framework

Live IR

Forensics

SIEM

Virtualization

Education

Certifications e.g. GCIH/GCFE

Tools

EDR platforms

Forensic tooling

Cloud forensics

Windows/Linux forensics

Job description

CyberClan in Australia is seeking a DFIR Incident Responder to join a 24x7/365 service delivery team. You will support a wide range of technologies, perform advanced troubleshooting (packet captures, debugs, traffic analysis) and help develop IR lifecycles and post‑breach remediation policies.

Requires 2–3 years in DFIR, experience deploying EDR, knowledge of NIST frameworks, and forensic investigations on‑premises and cloud.