Security Forensics Engineer

Forensic Focus Limited; City of Melbourne; On-site; AUD 110,000 - 150,000; Full time

Job summary

Pepperstone is seeking a Security Forensics Engineer to lead investigations across cloud, endpoint, network and SaaS environments in Melbourne. You will perform root cause analysis on security incidents and analyse malware and phishing campaigns.

Ideal candidates have hands-on digital forensics or incident response experience, familiarity with Windows, Linux, macOS and cloud platforms, and knowledge of MITRE ATT&CK framework. You will produce clear reports for technical and executive audiences.

Qualifications

• Hands-on experience in digital forensics or incident response.
• Solid grasp of forensic methodologies across Windows, Linux, macOS and cloud platforms.
• Familiarity with SIEM technologies, endpoint artefacts and log analysis; knowledge of MITRE ATT&CK and attacker TTPs is expected.

Responsibilities

• Lead forensic examinations across cloud, endpoint, network and SaaS environments.
• Perform root cause analysis on security incidents.
• Analyse malware and phishing campaigns; produce clear investigation reports for technical and executive audiences.

Skills

Digital forensics

Incident response

Windows

Linux

macOS

Cloud platforms

SIEM

Endpoint artifacts

Log analysis

MITRE ATT&CK

Job description

# Security Forensics Engineer*Pepperstone***Melbourne, Victoria**Mid · Full-time### The RoleThis position sits at the intersection of digital forensics, incident response and cyber investigations. Day to day, the engineer leads forensic examinations across cloud, endpoint, network and SaaS environments, performs root cause analysis on security incidents, analyses malware and phishing campaigns, and produces clear investigation reports for both technical and executive audiences.### Skills & ExperienceCandidates should have hands-on experience in digital forensics or incident response, a solid grasp of forensic methodologies across Windows, Linux, macOS and cloud platforms, and familiarity with SIEM technologies, endpoint artefacts and log analysis. Knowledge of the MITRE ATT&CK framework and attacker TTPs is expected.### Who It SuitsThis role suits a naturally curious investigator with a background in digital forensics, cyber investigations or security operations who thrives in fast-paced, complex environments. It is well suited to someone comfortable bridging technical investigation work with clear communication to non-technical stakeholders, including regulators and executives.