Senior DFIR Lead & Incident Response Strategist

Forensic Focus; Sydney; On-site; AUD 180,000 - 280,000; Full time

Job summary

Forensic Focus in Sydney seeks a senior DFIR specialist to lead complex forensic investigations and high-impact cyber incident casework. You will provide authoritative written and oral advice on contentious matters and help shape technical standards and DFIR research.

You will manage multidisciplinary projects and mentor teams while engaging law firms, insurers, and corporate stakeholders, including courtroom testimony, within a growing specialist consultancy.

Qualifications

• Eight-plus years of hands-on DFIR experience across Windows, macOS and Linux.
• Experience with cloud platforms (M365, AWS, Azure) and mobile devices.
• Proficiency in forensic acquisition, memory analysis and artefact analysis.
• Experience with SIEM/EDR tools (Splunk, CrowdStrike).
• Scripting skills in Python, PowerShell or Bash.
• GCFA or CFCE certification; expert-witness experience is highly regarded.

Responsibilities

• Lead complex forensic investigations and high-impact cyber incident casework.
• Provide authoritative written and oral advice on contentious matters.
• Shape technical standards and drive research into new DFIR techniques.
• Manage multidisciplinary projects and mentor teams.
• Engage with law firms, insurers and corporate stakeholders, including courtroom testimony.

Skills

Forensic investigations

Leadership & mentoring

Stakeholder engagement

Scripting (Python/PowerShell/Bash)

Education

GCFA

CFCE

Tools

Splunk

CrowdStrike

Job description

Forensic Focus in Sydney seeks a senior DFIR specialist to lead complex forensic investigations and high-impact cyber incident casework. You will provide authoritative written and oral advice on contentious matters and help shape technical standards and DFIR research.

You will manage multidisciplinary projects and mentor teams while engaging law firms, insurers, and corporate stakeholders, including courtroom testimony, within a growing specialist consultancy.