Senior DFIR Analyst - Lead Incident Response & Forensics

The Cache Group; Melbourne; Presencial; AUD 120.000 - 170.000; Jornada completa

Descripción de la vacante

The Cache Group is seeking a Senior DFIR Analyst to join its growing Australia-wide cyber security practice. You will lead smaller incident response engagements from scoping to final reporting and work on live investigations across the Tasman region with the DFIR team.

You will respond to ransomware, BEC, malware and insider threats, collect and preserve evidence, and perform host, memory, and log analysis. Strong reporting skills are essential.

Formación

• 3–5 years hands-on in DFIR.
• Hands-on with EDR and forensic tooling.
• Clear written reports for technical and non-technical readers.
• Eligible for Australian Baseline security clearance and police check.
• GCFA, GCFE, GCIH, CCFR or SC-200 advantageous; proven experience counts more.
• Python or PowerShell scripting, and MS 365/cloud investigations are a plus.

Responsabilidades

• Lead smaller incident response engagements from scoping to final report.
• Respond to ransomware, business email compromise, malware and insider threat cases.
• Collect and preserve evidence; run host, memory and log analysis.
• Hunt with Velociraptor and contain with EDR such as CrowdStrike or Defender for Endpoint.
• Write clear findings and reports for technical and non-technical readers.

Conocimientos

DFIR experience

EDR tooling

Technical reporting

Python scripting

Herramientas

CrowdStrike

Defender for Endpoint

Velociraptor

Descripción del empleo

The Cache Group is seeking a Senior DFIR Analyst to join its growing Australia-wide cyber security practice. You will lead smaller incident response engagements from scoping to final reporting and work on live investigations across the Tasman region with the DFIR team.

You will respond to ransomware, BEC, malware and insider threats, collect and preserve evidence, and perform host, memory, and log analysis. Strong reporting skills are essential.