Digital Forensics & Incident Response (DFIR) Analyst

Location: VIC | NSW | WA

About the Opportunity

We are partnering with a leading cybersecurity organisation looking to expand its Digital Forensics & Incident Response (DFIR) team with the addition of two experienced DFIR Analysts.

This is an opportunity to join a specialist cybersecurity function working on complex investigations, helping organisations understand, respond to and recover from sophisticated cyber incidents.

We are looking for hands-on forensic professionals who can go beyond traditional SOC operations. The ideal candidates will have practical experience investigating compromised environments, analysing digital evidence and reconstructing cyber incidents across Windows, Linux and cloud environments.

Your responsibilities will include:

- Conducting hands-on digital forensic investigations across Windows, Linux and cloud environments.
- Acquiring, preserving and analysing digital evidence to establish the scope and nature of security incidents.
- Performing Windows forensic analysis, including registry examination, event logs, Master File Table (MFT), system artefacts and memory analysis.
- Investigating Linux environments, analysing system logs, filesystem artefacts, authentication activity and persistence mechanisms.
- Conducting cloud forensic investigations across Microsoft 365, Microsoft Entra ID, AWS and Azure.
- Supporting investigations involving ransomware, data breaches, insider threats and other sophisticated cyber incidents.
- Reconstructing attack timelines to establish how threat actors gained access, moved through environments and maintained persistence.




- Producing detailed forensic reports and presenting technical findings to internal stakeholders and clients.
- Working alongside incident response and cybersecurity teams to support containment, remediation and recovery activities.

About You

You will be a technically capable forensic investigator with practical experience conducting digital investigations and responding to real-world cyber incidents.

You will ideally bring:

- Experience in Digital Forensics, Incident Response (DFIR) or Cybersecurity Forensic Investigations.
- Strong hands-on experience with Windows forensic investigations.
- Working knowledge of Linux forensics and filesystem analysis.
- Experience on ransomware, data breach and insider threat investigations.
- Exposure to cloud forensic investigations across M365, Entra ID, AWS and/or Azure.
- Experience investigating ransomware, data breaches, insider threats or other security incidents.
- Understanding of memory analysis, digital artefact examination and forensic evidence preservation.
- Experience using forensic investigation tools and technologies.
- Solid analytical, problem-solving and technical reporting capabilities.

Why Consider This Opportunity?

- Join a specialist cybersecurity and DFIR function.
- Work on complex, real-world cyber investigations.
- Develop your technical expertise across endpoint, Linux and cloud forensics.
- Be part of a growing team with opportunities to develop your career within digital forensics and incident response.

Interested?

If you are an experienced Digital Forensics or Incident Response professional looking for your next opportunity, we'd be keen to hear from you.

Apply directly or reach out for a confidential discussion. You can email me directly at: [email protected]

📌 Digital Forensics & Incident Response Analyst (Melbourne)
🏢 Hamilton Barnes
📍 Melbourne