Job description Incident Response Engineer IT | Sydney Metropolitan Closing date: 13/11/2026 DISCOVER more opportunities to DEVELOP your talents and THRIVE in a energetic legal landscape.
About the role As an Incident Response Engineer, you will be responsible for supporting and enhancing the firm's cyber security incident response capabilities.
Working closely with Digital and Technology colleagues and technical teams across the business, you will investigate potential security incidents, identify adversary activity, and help protect the integrity of the firm's information technology assets.
You will also contribute to the design and maintenance of incident response platforms and processes that enable rapid and effective responses to cyber security events.
What does the role involve?
Conduct digital forensic investigations and examinations.




Analyse files and systems for malicious activity, including malware analysis.
Investigate potential cyber security incidents and suspected breaches.
Anticipate threat actor behaviour and recommend appropriate countermeasures.
Lead or support containment and recovery efforts following network intrusions.
Document findings and present incident reports to senior stakeholders.
Support data collection activities for client transfers and internal eDiscovery matters.
Collaborate with technical teams to assess risks and respond to emerging threats.
Contribute to the continuous improvement of incident response procedures, documentation, and reporting metrics.
About you We value our culture at K

📌 Incident Response Engineer (Sydney)
🏢 K&L Gates
📍 Sydney