Remote Incident Response Analyst - Cyber Threat Hunter

Forensic Focus; Australia; Remote; AUD 95,000 - 129,000; Full time

Job summary

Forensic Focus in Australia seeks an experienced Incident Response Analyst to lead investigations into active cyber incidents for managed detection and response customers. You will analyse malware and ransomware activity, contain threats, document findings, and collaborate with threat hunting and detection engineering teams to refine investigative approaches.

The role requires 3+ years in cyber threat investigations, strong endpoint and network forensics across Windows, macOS and Linux, and

Qualifications

• 3+ years investigating cyber threats.
• Familiarity with endpoint and network forensics across Windows, macOS and Linux.
• Experience with EDR/IDS/IPS tools.
• Scripting skills.
• Knowledge of MITRE ATT&CK framework.

Responsibilities

• Lead investigations into active cyber incidents for MDR customers.
• Analyse malware and ransomware activity.
• Contain threats and document findings.
• Collaborate with threat hunting and detection engineering teams to refine investigation approaches.

Skills

Threat investigation

Forensics (endpoint/network)

EDR/IDS/IPS tools

Scripting

MITRE ATT&CK knowledge

Education

GCIH

Security+

Job description

Forensic Focus in Australia seeks an experienced Incident Response Analyst to lead investigations into active cyber incidents for managed detection and response customers. You will analyse malware and ransomware activity, contain threats, document findings, and collaborate with threat hunting and detection engineering teams to refine investigative approaches.

The role requires 3+ years in cyber threat investigations, strong endpoint and network forensics across Windows, macOS and Linux, and