Senior DFIR Consultant

Peoplebank; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

Peoplebank is seeking multiple senior Incident Responders to join its Cyber Security Response team in Sydney. You will command high-impact investigations, coordinate cross-functional response efforts, and perform advanced forensic analysis to protect the organisation.

The role focuses on shaping incident response capability, driving improvements, and briefing senior stakeholders. You will work in a fast-paced enterprise environment and lead readiness activities, including tabletop exercises and

Qualifications

• Extensive incident response leadership experience in large enterprises.
• Proven forensic investigations across endpoints, networks, cloud, and identities.
• Strong ability to brief executives and legal teams.

Responsibilities

• Lead and command major cyber security incidents from identification through containment, eradication, recovery, and closure.
• Coordinate and direct cross-functional response teams during complex, high-severity events.
• Conduct advanced digital forensic investigations across endpoint, network, identity, cloud, and memory-based environments.
• Oversee evidence collection and handling processes to ensure legal and regulatory defensibility.
• Act as the primary escalation point for Incident Responders on critical, sensitive, or ambiguous investigations.
• Provide clear and accurate incident briefings, situation reports, and updates to senior leadership and business stakeholders.
• Lead readiness initiatives including tabletop exercises, simulations, post-incident reviews, and lessons-learned activities.
• Drive improvements to incident response tooling, automation, processes, and operational capabilities.

Skills

Incident response leadership

Digital forensics

SIEM/EDR/XDR expertise

Stakeholder communication

Tools

SIEM

EDR

XDR

Job description

Our enterprise client is seeking multiple experienced Senior Incident Responders to join its Cyber Security Response team.

As the senior responder for major cyber incidents, you will command high-impact investigations, coordinate cross-functional response efforts, perform advanced forensic analysis, and provide trusted guidance to senior stakeholders. The role offers the opportunity to shape incident response capability, drive continuous improvement initiatives, and strengthen organisational resilience against evolving cyber threats.

Key Responsibilities

• Lead and command major cyber security incidents from identification through containment, eradication, recovery, and closure.
• Coordinate and direct cross-functional response teams during complex, high-severity events.
• Conduct advanced digital forensic investigations across endpoint, network, identity, cloud, and memory-based environments.
• Oversee evidence collection and handling processes to ensure legal and regulatory defensibility.
• Act as the primary escalation point for Incident Responders on critical, sensitive, or ambiguous investigations.
• Provide clear and accurate incident briefings, situation reports, and updates to senior leadership and business stakeholders.
• Lead readiness initiatives including tabletop exercises, simulations, post-incident reviews, and lessons-learned activities.
• Drive improvements to incident response tooling, automation, processes, and operational capabilities.

Our enterprise client is seeking multiple experienced Senior Incident Responders to join its Cyber Security Response team.

As the senior responder for major cyber incidents, you will command high-impact investigations, coordinate cross-functional response efforts, perform advanced forensic analysis, and provide trusted guidance to senior stakeholders. The role offers the opportunity to shape incident response capability, drive continuous improvement initiatives, and strengthen organisational resilience against evolving cyber threats.

Key Responsibilities

• Lead and command major cyber security incidents from identification through containment, eradication, recovery, and closure.
• Coordinate and direct cross-functional response teams during complex, high-severity events.
• Conduct advanced digital forensic investigations across endpoint, network, identity, cloud, and memory-based environments.
• Oversee evidence collection and handling processes to ensure legal and regulatory defensibility.
• Act as the primary escalation point for Incident Responders on critical, sensitive, or ambiguous investigations.
• Provide clear and accurate incident briefings, situation reports, and updates to senior leadership and business stakeholders.
• Lead readiness initiatives including tabletop exercises, simulations, post-incident reviews, and lessons-learned activities.
• Drive improvements to incident response tooling, automation, processes, and operational capabilities.

Requirements

• Extensive experience leading cyber incident response and digital forensic investigations within large, complex enterprise environments.
• Proven ability to command major, multi-team cyber incidents and make critical decisions under pressure with incomplete information.
• Deep hands-on forensic expertise across host, memory, network, cloud, and identity investigations.
• Expert knowledge of the incident response lifecycle, evidence handling practices, and forensic methodologies.
• Advanced proficiency with SIEM, EDR, and XDR technologies, including large-scale security log analysis and investigation.
• Exceptional communication and stakeholder management skills, with experience briefing executives, legal teams, and senior business leaders.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.