Senior DFIR Analyst - Remote Incident Response Lead

Launch Recruitment - IT Recruiting; Melbourne; À distance; AUD 90 000 - 130 000; Plein temps

Résumé du poste

Launch Recruitment - IT Recruiting is partnering with a global cyber security organisation to recruit an experienced DFIR Analyst for a remote role supporting clients worldwide.

You will lead digital forensics investigations across endpoints, networks and cloud, perform incident triage, respond to complex security events and communicate findings to technical and non-technical stakeholders while facilitating tabletop exercises.

Qualifications

• 2–3 years hands-on DFIR or incident response experience.
• Strong experience with BEC incidents and triage.
• Experience in on-premise and cloud forensic investigations.
• Proficient with EDR, SIEM and forensic tools.
• Excellent communication and client-facing skills.

Responsabilités

• Lead and supervise digital forensic investigations across endpoint, network, cloud and enterprise environments.
• Conduct incident triage, investigation, containment, eradication and remediation activities.
• Investigate Business Email Compromise (BEC) incidents, including compromised accounts, phishing and mailbox access.
• Analyse forensic evidence, logs and endpoint activity to determine root cause and impact.
• Perform live endpoint investigations and collect artefacts for offline analysis.
• Utilise EDR, SIEM and other security technologies to investigate suspicious activity.
• Develop incident reports and remediation recommendations.
• Contribute to post-breach improvements of procedures and playbooks.

Connaissances

DFIR analyst

Incident response

BEC investigations

Client engagement

Analytical thinking

Communication skills

Formation

Bachelor's degree in Cyber Security/CS

Outils

EDR tools

SIEM platforms

Forensic tooling

Description du poste

Launch Recruitment - IT Recruiting is partnering with a global cyber security organisation to recruit an experienced DFIR Analyst for a remote role supporting clients worldwide.

You will lead digital forensics investigations across endpoints, networks and cloud, perform incident triage, respond to complex security events and communicate findings to technical and non-technical stakeholders while facilitating tabletop exercises.