Senior DFIR & Incident Response Analyst (Global)

Check Point Software; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

Check Point Software in Sydney is seeking a senior cybersecurity incident response professional to lead T3 investigations and coordinate global incident handling. You will drive incident response efforts, analyze compromised systems, and produce actionable remediation playbooks to protect customers worldwide.

You will work with cross-functional teams to develop defenses, perform forensic analysis, and report on attacker techniques and artifacts.

Qualifications

• 7+ years of cybersecurity experience, with 2-5 years in T3 incident response focused on system compromise.
• Experience performing security reviews and vulnerability risk assessments of network environments.
• Experience with Magnet AXIOM.
• Experience with enterprise security solutions and incident crisis management.
• Experience with attack simulations for security training.
• Experience creating procedures and documented security plans.
• Ability to participate in on-call rotation, including at least one weekend per month.
• Willingness to travel domestically and internationally.

Responsibilities

• Responsible for daily incident management of customer incidents.
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation.
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts.
• Ability to manage complicated global incidents.
• Ability to perform large-scale compromise assessments for customer environments.
• Build incident response plans and playbooks.
• Create attack scenarios for customer tabletop training exercises.
• Creation of detailed incident reports for customers and effective communication of findings to customers.
• Build and maintain sandbox/test lab environments to evaluate malicious code.
• Work within a team environment and will be responsible for coordinating work actions.

Skills

Incident response

System compromise analysis

Vulnerability risk assessments

Magnet AXIOM

Enterprise security solutions

Incident crisis management

Attack simulation

Security procedures

On-call rotation

Travel willingness

Tools

Magnet AXIOM

Job description

Check Point Software in Sydney is seeking a senior cybersecurity incident response professional to lead T3 investigations and coordinate global incident handling. You will drive incident response efforts, analyze compromised systems, and produce actionable remediation playbooks to protect customers worldwide.

You will work with cross-functional teams to develop defenses, perform forensic analysis, and report on attacker techniques and artifacts.