Listed 2 weeks ago
Senior DFIR Analyst
The Cache Group
Apply
via thecachegroup.catsone.com
Security
- Location
- Melbourne, VIC
- Type
- Full-time
About the role
Our client is a fast-growing cyber security consultancy across Australia and New Zealand. They are building the Australian arm of their Digital Forensics and Incident Response practice.
They have an immediate need for a Senior DFIR Analyst in a permanent role, with a choice of city across Australia.
You will work on live investigations alongside an established DFIR team across the Tasman, and lead smaller engagements end to end.
The role
- Lead smaller incident response engagements from scoping to final report
- Respond to ransomware, business email compromise, malware and insider threat cases
- Collect and preserve evidence; run host, memory and log analysis
- Hunt with Velociraptor and contain with EDR such as CrowdStrike or Defender for Endpoint
- Write clear findings and reports for technical and non-technical readers
This is hands-on investigation, not alert monitoring.
What you'll need to succeed;
- About 3 to 5 years hands-on in DFIR
- Hands-on with EDR and forensic tooling
- Clear written reports for technical and non-technical readers
- Eligible for an Australian Baseline security clearance and able to pass a police check
- GCFA, GCFE, GCIH, CCFR or SC-200 advantageous; proven experience counts more
- Python or PowerShell scripting, and Microsoft 365 or cloud investigations, are a plus
Suitably skilled candidates are encouraged to apply with an achievement-based CV.
Apply
via thecachegroup.catsone.com
