Our client is a quick-growing cyber security consultancy across Australia and New Zealand. They are building the Australian arm of their Digital Forensics and Incident Response practice.

They have an immediate need for a Senior DFIR Analyst in a permanent role, with a choice of city across Australia.

You will work on live investigations alongside an established DFIR team across the Tasman, and lead smaller engagements end to end.

The role
Lead smaller incident response engagements from scoping to final report
Respond to ransomware, business email compromise, malware and insider threat cases
Collect and preserve evidence; run host, memory and log analysis
Hunt with Velociraptor and contain with EDR such as CrowdStrike or Defender for Endpoint




Write explicit findings and reports for technical and non-technical readers

This is hands-on investigation, not alert monitoring.

What you'll need to succeed;
About 3 to 5 years hands-on in DFIR
Hands-on with EDR and forensic tooling
Transparent written reports for technical and non-technical readers
Eligible for an Australian Baseline security clearance and able to pass a police check
GCFA, GCFE, GCIH, CCFR or SC-200 advantageous; proven experience counts more
Python or PowerShell scripting, and Microsoft 365 or cloud investigations, are a plus

Suitably skilled candidates are encouraged to apply with an achievement-based CV.

📌 Senior Dfir Analyst Melbourne
🏢 The Cache Group
📍 Melbourne