Senior DFIR Analyst - Remote Incident Response & Forensics

Gridware; Sydney; Remote; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Remote-friendly

Fully remote option

Sydney office option

Job summary

Gridware is seeking a Senior DFIR Analyst to lead investigations into BEC, ransomware and web application breaches, driving evidence collection, forensic analysis, and reporting with a top-notch team.

Experience with CrowdStrike Falcon, RTR containment, and Windows/Linux/macOS forensics is essential; remote-friendly role offering fully remote or Sydney office options in a flexible, fast-paced environment.

Qualifications

• Hands-on with CrowdStrike Falcon for endpoint investigation, threat hunting, and incident containment.
• Real-world experience in incident response, digital forensics, or a security operations centre.
• Demonstrated technical capability with digital forensics tools, on Windows systems (plus Linux/macOS is a plus).
• Autonomous, critical thinker with a team-first mindset.
• General cyber security knowledge, threat landscape and playbooks.
• Strong communication skills to convey technical concepts to varied audiences.
• Certifications such as GCFE, GCFA, or GCIH are helpful but not essential.

Responsibilities

• Collect and preserve evidence across incidents.
• Conduct host-based and network-based forensics.
• Perform malware analysis and log review.
• Lead investigations and contribute to strategy across incident types.

Skills

CrowdStrike

RTR (Real Time Response)

Incident response

Forensics

Windows

Linux

macOS

Threat hunting

Communication

Teamwork

Tools

KAPE

AXIOM

SOF-ELK

Velociraptor

CrowdStrike

SentinelOne

Job description

Gridware is seeking a Senior DFIR Analyst to lead investigations into BEC, ransomware and web application breaches, driving evidence collection, forensic analysis, and reporting with a top-notch team.

Experience with CrowdStrike Falcon, RTR containment, and Windows/Linux/macOS forensics is essential; remote-friendly role offering fully remote or Sydney office options in a flexible, fast-paced environment.