Cyber Incident Responder (DFIR)

Be part of a business where employees are recognised and career growth is genuinely supported, a place where you can help build a world of more possibilities for more people, no matter your role.

We are hiring a Cyber Incident Response Handler to lead the response to security incidents, threats, and vulnerabilities within our Cyber Ops Center. This role engages across the full incident lifecycle, analysing logs and security data to contain and resolve incidents, identify root causes, and provide clear remediation recommendations.

Key Responsibilities

- Identify, respond to, and mitigate advanced cyber threats across enterprise networks
- Lead incident response investigations and drive rapid containment and resolution
- Coordinate response efforts across multiple teams and business units, including post-incident reviews
- Proactively monitor environments, maintain incident response playbooks, and stay current on emerging threats




- Communicate clearly with leadership and stakeholders while ensuring confidentiality and supporting on‑call needs
- Mentor and manage escalations from junior staff

About You

- 3-5+ years' experience in information security and incident operations
- Solid knowledge of Linux/UNIX, Windows, networking, and security tools
- Proven skills in incident analysis, troubleshooting, and root cause resolution
- Experience with security monitoring, SIEM, firewalls, security tooling, and scripting
- Excellent communication, teamwork, decision‑making, and customer focus
- Experience mentoring junior staff is a plus
- SANS GCFA or GCIH certification is a plus
- Hands‑on digital forensics and/or malware analysis experience is a plus
- A proactive attitude, always looking for improvement opportunities that positively impact security posture and the business
- Excellent interpersonal, mentoring, and collaborative skills

#J-18808-Ljbffr

📌 Cyber Incident Responder (DFIR) (City of Sydney)
🏢 Lanson Partners
📍 City of Sydney