The Role

This senior position leads complex forensic investigations and high-impact cyber incident casework, delivering authoritative written and oral advice on contentious matters. The role shapes technical standards, drives research into new DFIR techniques, and manages multidisciplinary projects while engaging law firms, insurers and corporate stakeholders.

Skills & Experience

Requires eight-plus years of hands-on DFIR experience spanning Windows, macOS, Linux, cloud platforms (M365, AWS, Azure) and mobile devices. Candidates should master forensic acquisition, memory and artefact analysis, SIEM/EDR tools like Splunk and CrowdStrike, and scripting in Python, PowerShell or Bash. GCFA or CFCE certification and expert-witness experience are highly regarded.

Who It Suits

Ideal for a seasoned forensic examiner ready to lead investigations, mentor teams, and engage confidently with legal and corporate stakeholders, including courtroom testimony, within a growing specialist consultancy workplace.

#J-18808-Ljbffr

📌 Principal Analyst (Sydney)
🏢 Forensic Focus
📍 Sydney