Hiring for Cyber Expert - Forensics DFIR

Location- SYDNEY

Position- Permanent

Description

Platform engineering and configuration

5+ years of experience in design and implement of RunZero or any other comparable security product and platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards.

Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments.

Design appropriate active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.

Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive or fragile environments.

Configure asset classification, ownership, business context, criticality and lifecycle attributes.

Define standards for handling transient, ephemeral, duplicate, decommissioned and unmanaged assets.

Develop reusable configuration patterns and templates that can be applied consistently across sites and environments.

Maintain a clear separation between production configuration, testing and experimental changes.





Integrations and data engineering

Integrate current product with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.

Implement API based ingestion and egress patterns using secure service identities and least privilege access.

Automate asset reconciliation, deduplication, enrichment, ownership mapping and data quality checks.

Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.

Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.

Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data volume changes.

Automation and workflow engineering

Note- Must have valid Australian work Authorization.

Interested candidates can Apply or share updated CV on [email protected] or can reach me on <+61> <283 195 538>.

Regards

Purnima

📌 Cyber Expert - Forensics DFIR (Sydney)
🏢 CareCone Group
📍 Sydney