Lead Incident Responder – DFIR Specialist

The Role

This position involves leading incident response engagements for enterprise clients experiencing active cyber breaches, managing a team of investigators, collecting and analysing digital evidence, scoping technical work, preparing reports and deliverables, and providing on-site support across Australia and internationally within an established DFIR operational framework.

Skills & Experience

Candidates must have led at least one enterprise-scale cyber incident or major data breach in Australia or New Zealand. A strong IT and cyber security background is essential, alongside proven DFIR technical capability. Effective stakeholder communication with senior leaders is required. DFIR certifications are highly desirable.

Who It Suits

This role suits a seasoned DFIR professional who is comfortable taking ownership of complex, high-pressure engagements with minimal oversight. Someone who combines deep technical expertise with the leadership and communication skills to guide investigative teams and maintain credibility with executive-level stakeholders will thrive here.