Principal DFIR Analyst

Forensic Focus Limited; New Zealand; On-site; NZD 140,000 - 200,000; Full time

Job summary

Forensic Focus Limited in New Zealand seeks a senior DFIR leader who directs complex digital investigations and incident response within a national security operations centre, safeguarding healthcare infrastructure.

You will drive threat hunting, cloud security operations, and cross-functional collaboration with clinical, IT, and executive stakeholders, molding national response capabilities while mentoring junior analysts.

Qualifications

• Extensive DFIR and incident response expertise in enterprise environments.
• Experience in threat hunting and cloud security operations.
• Senior-level designated as technical escalation point.

Responsibilities

• Lead digital forensics investigations and incident response operations.
• Conduct threat hunting and manage major security incidents.
• Drive cloud security operations across the organisation.
• Collaborate with clinical, IT, and executive stakeholders.

Skills

Digital forensics

Incident response

Threat hunting

Cloud security

AI-driven security

Threat intel platforms

Security automation

Analytics tools

Leadership

Tools

Threat intelligence platforms

Security automation tools

Analytics platforms

Job description

The Role

This senior position leads complex digital forensic investigations and incident response operations within a national security operations centre, protecting large-scale healthcare infrastructure. Day to day, the analyst conducts threat hunting, manages major security incidents, drives cloud security operations, and collaborates with clinical, IT, and executive stakeholders across the organisation.

Skills & Experience

Candidates should bring deep expertise in digital forensics and incident response, threat hunting, and cloud security within enterprise environments. Familiarity with AI-driven security technologies, threat intelligence platforms, and security automation and analytics tools is expected. Senior-level experience acting as a technical escalation point is essential.

Who It Suits

This role suits a highly experienced DFIR professional ready to operate at a strategic and technical leadership level, shaping national response capabilities while mentoring junior analysts. Someone motivated by protecting critical public services and comfortable engaging stakeholders at all levels, including executive leadership, will thrive here.