Job Description
Senior Analyst / Assistant Manager - Incident Response
McGrathNicolis a specialist Advisory and Restructuring firm, helping businesses improve performance, manage risk, and achieve stability and growth.
Guided by our values of Understanding, Commitment, and Impact, we are high-performing, client-focused, and proud of our collegiate culture.
Our people are at the heart of everything we do, and we are committed to attractingandretainingexceptionaltalent.
The Opportunity
McGrathNicol's Technology & Cyber team supports clients through high‐pressure cyber incidents and investigations.
You will support the delivery of digital forensics and incident response engagements by conducting incident triage activities, performing defensible evidence collection and analysis, contributing tocontainment/eradicationsupport, and producing clear client-ready reporting.
You will work as part of an incident team under the direction of a Senior team member, applying McGrathNicol's quality, risk, and client service standards.
Key Responsibilities
Support cyber incident responseengagements,assistingwithincident intake, triage,scopingand prioritisationintimecriticalsituations.
Perform and document defensible evidence handling, including preservation, collectionandchainofcustodywhererequired.
Assistwith forensic acquisition and analysis acrossendpoints,serversandrelevant cloud/SaaS data sources.
Analyse security telemetry and logs (e.g. EDR, SIEM, system logs)toidentifyindicators,reconstruct timelines and assess incident scope and impact.
Support clients with containment and eradication activities,



providingpractical,evidencebasedguidanceto technical teams.
Prepareclear,clientreadydeliverables,including incident updates, investigationsummaries,timelinesandrecommendations.
Contributetopostincidentreviews,lessons learned and recommendations to uplift detection,responseprocessesandplaybooks.
Developandmaintainrepeatableinvestigation artefacts, including queries, scripts, templates and working papers.
Adhere to McGrathNicolquality,confidentialityandrisk management requirements across all DFIR engagements.
Contribute to other Technology & Cyber engagements asrequired, including governance, risk and compliance (GRC) work, technology expert matters, cyber resilience uplift, or offensive security–related engagements, providing DFIR-informed input where relevant.
Actively contribute to the DFIR team, including knowledge sharing and supporting junior staff during engagements.
About You
A technically capable cyber professional with experience supporting digital forensics and incident response engagements in complex environments.
Comfortable working under pressure and responding calmly and methodically during active cyber incidents.
Experienced in handling sensitive data and evidence,



with a solid appreciation foraccuracy,defensibilityanddocumentation discipline.
Interested in developing abroad,wellroundedcyberskillset, with exposure to DFIR, governance and risk, and offensive or defensive security work.
Adaptable and open to contributing across different engagement types, recognising the valueofcrossdisciplineexperiencein a consulting environment.
Able to analyse technical information and translate findings into clear,structuredclientreadyoutputs.
Curious,analyticalandkeen to continuously develop your DFIR skillset,toolsand techniques.
A collaborative team member withstrongcommunicationskillsandaclientfocusedmindset.
Holds aBachelordegree in a STEM field or hasequivalentdemonstratedtechnicalexperience.
Why Join Us?
AtMcGrathNicol,you'llthrive in an empowering environment whereyourexpertisedrivesreal impact.
We offer a competitive annual bonus program, alongsideexceptionaltrainingandcareerdevelopmentopportunities.Our inclusive culture fosters growth through personalised mentorship.You'llalsobenefitfrom comprehensive support such as 26 weeks parentalleave,additionalleaveoptions,employeeassistance,health and wellbeing programs, and opportunities for social and community engagement.
Join us and be part of a team that values your contributions and supports your success.
Be careful - Don't provide your bank or credit card details when applying for jobs.
Don't transfer any money or complete suspicious online surveys.
If you see something suspicious, report this job ad .
#J-*****-Ljbffr

📌 Senior Analyst / Assistant Manager - Incident Response (New South Wales)
🏢 Mcgrathnicol
📍 New South Wales