Senior DFIR Investigator & Incident Response Lead

Forensic Focus Limited; Sydney; Hybrid; AUD 150,000 - 230,000; Full time

Job summary

Forensic Focus Limited in Sydney seeks a senior DFIR professional to lead high-priority investigations across endpoints, networks and cloud platforms, identifying root causes and attack methods.

You will partner with incident response, threat defence and security operations teams, while driving improvements to forensic tooling, automation and readiness processes.

A track record of five+ years in DFIR, malware analysis, memory forensics, and relevant certifications is required.

Qualifications

• Five or more years in DFIR or cyber investigations.
• Expertise in malware analysis, memory forensics and threat hunting.
• Experience identifying root causes and securing evidence.

Responsibilities

• Lead high-priority cyber investigations across endpoints, networks and cloud.
• Identify root causes and attack methods for incidents.
• Collaborate with incident response, threat defence and SOC teams.
• Drive improvements to forensic tooling, automation, and readiness processes.

Skills

DFIR experience

Malware analysis

Memory forensics

Threat hunting

Evidence collection

Root cause analysis

Forensic tooling

Education

GCFA

GCFE

EnCE

CFCE

MCFE

Tools

SIEM

EDR

IDS/IPS

DLP

Job description

Forensic Focus Limited in Sydney seeks a senior DFIR professional to lead high-priority investigations across endpoints, networks and cloud platforms, identifying root causes and attack methods.

You will partner with incident response, threat defence and security operations teams, while driving improvements to forensic tooling, automation and readiness processes.

A track record of five+ years in DFIR, malware analysis, memory forensics, and relevant certifications is required.