Senior DFIR Analyst

Forensic Focus; Sydney; Remote; AUD 108,000 - 138,000; Full time

Job summary

Forensic Focus in Australia is seeking a Senior DFIR Analyst to lead investigations into business email compromise, ransomware, and web application breaches. You will oversee evidence collection, preservation, and perform host and network forensics, malware analysis, and log reviews across the complete incident response lifecycle.

The role requires at least two years in DFIR or SOC, strong Windows forensics, and familiarity with DFIR tools such as KAPE, AXIOM, SOF-ELK, Velociraptor, CrowdStrike

Qualifications

• Two years hands-on DFIR or SOC experience.
• Strong Windows forensic skills.
• Familiar with listed DFIR tools (KAPE, AXIOM, SOF-ELK, Velociraptor, CrowdStrike Falcon, SentinelOne).

Responsibilities

• Lead and support investigations into business email compromise, ransomware, and web application breaches.
• Collect and preserve evidence across cases.
• Perform host and network forensics and malware analysis.
• Review cloud and application logs across the full incident response lifecycle.

Skills

Two years DFIR or SOC experience

Windows forensics

Incident response

Familiar with DFIR tooling

Tools

KAPE

AXIOM

SOF-ELK

Velociraptor

CrowdStrike Falcon

SentinelOne

Job description

# Senior DFIR Analyst*Gridware***Sydney, New South Wales**Remote · Senior · Full-time### The RoleThis position involves leading and supporting investigations into business email compromise, ransomware, and web application breaches. Responsibilities include evidence collection and preservation, host and network forensics, malware analysis, and reviewing cloud and application logs across the full incident response lifecycle.### Skills & ExperienceCandidates need at least two years’ hands-on DFIR or SOC experience, strong Windows forensic skills, and familiarity with tools such as KAPE, AXIOM, SOF-ELK, Velociraptor, CrowdStrike Falcon, and SentinelOne. Certifications like GCFE, GCFA, or GCIH are beneficial but not mandatory.### Who It SuitsIdeal for an experienced forensic investigator who thrives on varied, high-urgency casework, enjoys working both independently and collaboratively, and wants exposure to diverse incident types across multiple industries.Typical advertised salary forDigital Forensics roles in Australia:**A$108,000–A$138,000**(median A$128,000 — from16 recent listings analysed by Forensic Focus).Compare Digital Forensics salaries in Australia →Certifications mentioned:GCFA · GCFE · GCIH — find training for these on theDFIR Training Finder.Learn More/Apply