Remote DFIR Analyst: Incident Response & Forensics

TTC Group (Tech Talent Consulting); Australia; Remote; AUD 90,000 - 150,000; Full time

Job summary

TTC Group (Tech Talent Consulting) is seeking a DFIR Analyst for a remote role based in Australia. You will work closely with the Director of Global Incident Response Operations in a metrics-driven environment, delivering incident response outcomes and supporting a global team.

Responsibilities include live endpoint investigations, developing IR methods, and coordinating with third parties to address security breaches.

Qualifications

• Minimum 2–3 years of DFIR experience.
• Experience deploying and managing EDR technology.
• Familiar with the NIST Cybersecurity Framework.

Responsibilities

• Support a wide range of technologies and perform advanced troubleshooting (packet captures, debugs, traffic analysis).
• Contribute to development of IR lifecycles and post-breach remediation policies and procedures.
• Document incident response methods and guidelines for the organization.
• Perform live-endpoint investigations and provide remediation actions.
• Implement and deploy an IR-focused ticketing system to improve incident tracking and metrics.
• Collaborate with 3rd parties for incident response and remediation.
• Prepare high-level technical reports for clients.
• Be part of a 24x7/365 service delivery team handling incidents and root-cause analysis.

Skills

DFIR experience

Incident response

Troubleshooting

Regional coverage

Tools

EDR deployment

NIST framework

Forensic tools

SIEM

Networking & VPNs

Job description

TTC Group (Tech Talent Consulting) is seeking a DFIR Analyst for a remote role based in Australia. You will work closely with the Director of Global Incident Response Operations in a metrics-driven environment, delivering incident response outcomes and supporting a global team.

Responsibilities include live endpoint investigations, developing IR methods, and coordinating with third parties to address security breaches.