THE COMPANY
This large and well-known organization employs more than 70,000 staff across 100+ countries worldwide.
They are a creative and innovative business expanding their Cyber Security capabilities in Australia by establishing a new DFIR function in the region.
What's on offer :
Join a newly established CSIRT team in Sydney.
Ongoing training by dedicated cyber trainers.
Flexible hybrid working options.
Collaborate with a seasoned team of passionate IR and DF professionals.
Engagement in interesting projects related to cloud security, Cloud IR, SOAR playbook development, and IR framework enhancement.
THE ROLE & RESPONSIBILITIES
This newly created Digital Forensics & Incident Response (DFIR) Specialist role aims to build regional capability in the APAC region.
The focus is on incident investigation & response, digital forensics, and process automation/upgrades.
You will collaborate with various global teams (SOC, Threat Intelligence, CSIRT, etc.) operating in a follow-the-sun model.
Key responsibilities include :
Monitoring, detecting, and responding to InfoSec threats.
Leading and supporting security incident investigations such as data breaches, malware infections, insider threats, and APTs.
Triage, containment, and remediation of cybersecurity incidents and threats.
Conducting root cause analysis and producing IR reports with actionable insights.
Collecting, preserving, and analyzing evidence from endpoints, networks, and cloud environments.
Performing memory forensics, disk forensics, and network packet analysis.
Identifying IOC's and TTP's used by threat actors.
Utilizing SIEM, EDR, and threat intelligence tools.
Proactively improving Incident Management and Response processes.
Researching emerging threats and developing tactical intelligence.
Integrating information from multiple sources for better organizational protection.
Collaborating with internal teams including SOC, IT, Legal, and business stakeholders.
Working within a global 'follow-the-sun' operational model.
REQUIRED EXPERIENCE / BACKGROUND / KNOWLEDGE
Suitable for a Senior SOC or CSIRT Analyst with proven multi-level cyber incident response experience in enterprise environments.
Ideal candidates will have a digital forensics background and strategic communication skills.
Essential requirements :
Proven incident response experience in cybersecurity.
Background in digital forensics.
Experience with SIEM, EDR, and forensic tools.
Threat hunting skills with query development abilities.
Ability to translate orchestration documents into SOAR playbooks.
Scripting skills (e.g., Python, PowerShell) are advantageous.
Knowledge of cloud security and incident response in cloud environments.
Experience within enterprise settings, preferably with dispersed teams.
Strong attention to detail, problem-solving, and analytical skills.
Effective communication and stakeholder management skills.
Australian Citizenship and ability to obtain NV1 clearance are mandatory.
This is a full-time, permanent role offering hybrid work arrangements with a salary range of approximately $140,000 - $150,000 (plus super), depending on experience.
Note :Australian Citizenship and NV1 clearance eligibility are essential.
Successful applicants will be contacted.
This position supports hybrid working.
#J-18808-Ljbffr