3 Months initial contract (with a view to extend contract or convert to permanent depending on your preference)
Hybrid role based in Central Sydney

We are seeking an experienced Cyber Security Incident Response Analyst to join a busy security operations environment on a 3 month initial contract. At the end of the initial contract there will be an chance to extend as a contractor or convert to permanent (depending on your preference).

This is a hands-on technical role focused on the investigation and containment of complex security incidents, threat hunting, and digital forensics. The successful resource will work closely with an established security team and report into senior security leadership.

Key Responsibilities
Serve as a technical lead for cyber security incident response, coordinating activities across operational teams and keeping stakeholders informed throughout
Conduct advanced technical investigations into complex security incidents using digital forensics and network analysis techniques
Map threat actor activities, identify indicators of compromise, and lead containment and remediation efforts




Provide expert guidance to the broader security team on incident response, threat hunting, and threat intelligence activities
Support the delivery of digital forensics services using both native OS tooling and specialised forensic platforms
Contribute to the continuous improvement of incident response processes and procedures

Skills and Experience
Minimum five years of experience in cyber security with a robust focus on incident response
Hands-on experience with SIEM platforms, firewall analysis, and EDR tooling
Solid understanding of threat actor techniques, tactics, and procedures
Experience with digital forensics across Windows and Linux settings using native OS tooling
Exposure to specialised forensics platforms such as Sleuthkit, Encase, or FTK is highly desirable
Strong analytical and problem solving skills with the ability to work autonomously under pressure
Excellent communication skills with the ability to brief both technical and non-technical stakeholders
Relevant industry certifications such as GCIH, GCFE, GCFA, CISSP or equivalent are desirable
J-18808-Ljbffr

📌 Cyber Security Incident Response Analyst City Of Sydney
🏢 Data#3
📍 City of Sydney