Our client is a quick-growing cyber security consultancy across Australia and New Zealand.
They are building the Australian arm of their Digital Forensics and Incident Response practice.They have an immediate need for a DFIR Analyst in a permanent role based in Sydney.You will work on live investigations alongside an established DFIR team across the Tasman, and grow quickly into more senior work.The roleRespond to ransomware, business email compromise, malware and insider threat casesCollect and preserve evidence under guidanceRun host, memory and log analysisHunt with Velociraptor and contain with EDR such as CrowdStrike or Defender for EndpointWrite clear findings and reportsThis is hands-on investigation,



not alert monitoring.What you'll need to succeed;1 to 3 years in DFIR, or a strong SOC or IR analyst ready to step upHands-on with EDR and forensic toolingClear written reports for technical and non-technical readersEligible for an Australian Baseline security clearance and able to pass a police checkGCFA, GCFE, GCIH, CCFR or SC-200 advantageous; proven experience counts morePython or PowerShell scripting, and Microsoft 365 or cloud investigations, are a plusSuitably skilled candidates are encouraged to apply with an achievement-based CV.
#J-*****-Ljbffr

📌 Dfir Analyst (Sydney)
🏢 Cache Group
📍 Sydney