Senior Incident Response Lead | Hybrid in Sydney

University of New South Wales; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible Working Options (work from  

17% Superannuation and extra leave

Extra 3 days leave at Christmas

Discounts and entitlements

Job summary

UNSW in Sydney, NSW, invites a Senior Principal Incident Response Analyst to join its CSIRT team. The role leads incident response, digital forensics, threat intelligence, and threat hunting across complex incidents, collaborating with MSSPs and internal stakeholders.

The position requires extensive cyber security experience, strategic thinking, and strong communication. Hybrid work arrangement with 2–3 days in the Kensington, Sydney location.

Qualifications

• Minimum ten years of industry experience in cyber security incident response.
• Minimum five years of management experience in a cyber security environment or senior support role.
• Strong technical skills in security controls including network, endpoint, application security, data protection, and/or IAM.
• Analytical and problem solving abilities with initiative.
• Strong communication and stakeholder engagement skills.

Responsibilities

• Serve as primary technical contact for cyber security incidents and coordinate response activities.
• Lead advanced investigations using digital forensics, malware analysis, and network analysis.
• Provide technical oversight to the CSIRT team in incident response, threat hunting, threat intelligence, and digital forensics.
• Drive development and refinement of incident response processes using AI and cutting‑edge technologies.
• Facilitate collaboration with internal UNSW teams and MSSP partners for aligned detection and response.
• Document and report PIRs detailing root cause, attack vectors, and actions taken.
• Prepare strategic security reports with trends and actionable recommendations.
• Proactively apply threat intelligence to strengthen defences.
• Lead generation and integration of actionable threat intelligence into playbooks.
• Conduct proactive threat hunting to detect anomalies in real time.
• Support security controls development with Security Engineering and adhere to ITSM practices.
• Oversee communications with stakeholders and ensure alignment with organisational goals.

Skills

Cyber security incident response

Digital forensics

Threat intelligence

Threat hunting

Network security

Endpoint security

Application security

Data protection

Identity and access management

Communication skills

Education

Relevant tertiary qualification or equivalent competence

Tools

GCFA

GREM

OSCP

CCSP

Job description

UNSW in Sydney, NSW, invites a Senior Principal Incident Response Analyst to join its CSIRT team. The role leads incident response, digital forensics, threat intelligence, and threat hunting across complex incidents, collaborating with MSSPs and internal stakeholders.

The position requires extensive cyber security experience, strategic thinking, and strong communication. Hybrid work arrangement with 2–3 days in the Kensington, Sydney location.