Senior DFIR Lead — Cyber Incident Response & Forensics

Seisma Consulting; Sydney; Presencial; AUD 180 000 - 240 000; Tempo integral

Resumo da oferta

Island Bell Advisers in Australia is seeking a Senior Adviser, DFIR to lead cyber incident responses from triage through recovery, translating forensic findings into clear, defensible advice for executives, boards, and regulators.

You will work with crisis communications, government and strategic advisers to deliver integrated responses across technical, legal, regulatory and reputational dimensions, shaping the practice and client priorities.

Qualificações

• At least 10 years' experience in cyber security, including five or more years of hands-on digital forensics and incident response.
• Proven record of leading complex incident responses from initial triage through to recovery and reporting.
• Strong forensic capability across Windows, Linux and macOS, including memory, log and network analysis.
• Experience investigating cloud and identity environments, particularly Microsoft 365 and Entra ID, plus at least one major cloud platform.
• Practical experience with industry-standard forensic, endpoint detection and response, and SIEM tools.
• Working knowledge of Australian regulatory reporting obligations and defensible evidence handling.
• The ability to produce clear, robust forensic reports and brief senior stakeholders in high-pressure situations.
• Strong professional judgement, discretion and personal accountability.

Responsabilidades

• Lead end-to-end cyber incident responses including ransomware and data theft.
• Direct triage, containment, eradication and recovery with client teams.
• Brief executives and boards on risks, options and decisions.
• Coordinate engagements under legal privilege with external counsel.
• Perform rigorous digital forensics across endpoints, servers and cloud.
• Develop incident response plans and tabletop exercises.
• Mentor advisers and contribute to client briefings.

Conhecimentos

IR leadership

Forensics

Cross-platform forensics

Cloud identity

Executive briefing

Formação académica

Cybersecurity / CS degree or equivalent

Ferramentas

CrowdStrike

Microsoft Defender

SentinelOne

Velociraptor

KAPE

Volatility

Magnet AXIOM

X-Ways

KQL

SPL

Descrição da oferta de emprego

Island Bell Advisers in Australia is seeking a Senior Adviser, DFIR to lead cyber incident responses from triage through recovery, translating forensic findings into clear, defensible advice for executives, boards, and regulators.

You will work with crisis communications, government and strategic advisers to deliver integrated responses across technical, legal, regulatory and reputational dimensions, shaping the practice and client priorities.