Cyber Forensics & Incident Response Analyst

SentinelOne; Auckland; On-site; NZD 90,000 - 130,000; Full time

Benefits offered by this job

Restricted Stock Units (RSUs)

Employee Stock Purchase Plan (ESPP)

Competitive leave benefits

Gender-neutral parental leave

Medical and insurance benefits

Employee Assistance Program (EAP)

Global home office allowance

Internet and mobile phone allowance

Flexible benefits allowance

Job summary

SentinelOne Auckland is seeking an experienced Incident Response Analyst to perform EDR-driven investigations across endpoints, networks, and cloud, preserving evidence and guiding containment actions.

The role requires hands-on forensics, strong communication, and the ability to work under pressure during high-profile incidents. Prior SentinelOne experience is a plus, with a focus on global security outcomes.

Qualifications

• 2+ years hands-on experience in digital forensics, incident response, or threat hunting.

Responsibilities

• Conduct EDR-driven incident response and forensics across endpoint, network, and cloud environments.
• Acquire and preserve forensic evidence following chain-of-custody procedures; support case intake with initial details.
• Support malware and memory analysis tasks under guidance of senior team members.
• Prepare security hardening recommendations and maintain case documentation throughout investigations.
• Contribute to customer-facing status updates and investigative reports for stakeholders.

Skills

Digital Forensics

Incident response

Threat hunting

EDR/XDR experience

Strong written/verbal communication

Education

Bachelor’s or Master’s degree in Digital Forensics, Cybersecurity, Computer Science, or related field

Tools

X-Ways Forensics

Axiom

FTK

SentinelOne (EDR)

SIEMs

Job description

SentinelOne Auckland is seeking an experienced Incident Response Analyst to perform EDR-driven investigations across endpoints, networks, and cloud, preserving evidence and guiding containment actions.

The role requires hands-on forensics, strong communication, and the ability to work under pressure during high-profile incidents. Prior SentinelOne experience is a plus, with a focus on global security outcomes.