Senior DFIR Lead: Cyber Incident Response & Readiness

Island Bell Advisers; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Island Bell Advisers is a multi-disciplinary strategic advisory firm for organisations facing their most complex challenges. As Senior Adviser, DFIR, you will lead end-to-end cyber incident responses and coordinate with executives, legal counsel, insurers and regulators to translate forensic findings into defensible advice.

You bring 10+ years in cyber security, with five or more years in hands-on DFIR, plus strong forensic skills across Windows, Linux, macOS, cloud and SIEM tools.

Qualifications

• Minimum 10 years in cyber security with 5+ years in DFIR and incident response.
• Proven ability to lead complex incident responses and report findings.
• Strong forensic capability across Windows, Linux and macOS, including memory and network analysis.
• Experience investigating cloud and identity environments (Microsoft 365, Entra ID) and major cloud platforms.

Responsibilities

• Lead end-to-end cyber incident responses for ransomware, data theft and extortion.
• Coordinate triage, containment, eradication and recovery with client teams.
• Brief executives and boards on risks, options and decisions.
• Investigate endpoints, servers, memory, logs and cloud environments.
• Maintain defensible evidence handling and chain of custody.
• Build incident response plans, playbooks and exercises.
• Mentor advisers and contribute to client briefings and thought leadership.

Skills

Digital forensics

Incident response

Threat hunting

Windows

Linux

macOS

Cloud security

Evidence handling

Education

Tertiary qualification in cyber security or related discipline

GCFA

GCFE

GNFA

GCIH

GREM

CREST IR certifications

Tools

CrowdStrike

Microsoft Defender

SentinelOne

Velociraptor

KAPE

Volatility

Magnet AXIOM

X-Ways

KQL

SPL

Job description

Island Bell Advisers is a multi-disciplinary strategic advisory firm for organisations facing their most complex challenges. As Senior Adviser, DFIR, you will lead end-to-end cyber incident responses and coordinate with executives, legal counsel, insurers and regulators to translate forensic findings into defensible advice.

You bring 10+ years in cyber security, with five or more years in hands-on DFIR, plus strong forensic skills across Windows, Linux, macOS, cloud and SIEM tools.