Principal Analyst
Infotrust
Sydney, New South Wales
This senior DFIR position requires a minimum of eight years’ hands-on experience across digital forensics and incident response, covering Windows, macOS, Linux/Unix, cloud environments (M365, AWS, Azure) and mobile platforms (iOS/Android). Day-to-day responsibilities include leading high-impact cyber incident investigations, conducting forensic acquisition and analysis of file systems and memory, interpreting SIEM and EDR data from tools such as Splunk, ELK and CrowdStrike, and scripting in Python, PowerShell or Bash for evidence automation. The role also involves setting technical and professional standards, directing leading-edge research, developing new techniques, and contributing to business development with law firms, insurers and corporate clients. The ability to provide expert opinion in court is valued, as are certifications such as GCFA or CFCE. Suits an experienced forensic practitioner ready to shape practice direction at a senior level.
Typical advertised salary for Digital Forensics roles in Australia: A$108,000–A$136,000 (median A$128,000 — from 10 recent listings analysed by Forensic Focus).
Compare Digital Forensics salaries in Australia →
Certifications mentioned: GCFA · CFCE — find training for these on the DFIR Training Finder.
