Principal Incident Response Analyst

This senior individual contributor role sits within a university’s Computer Security Incident Response Team, serving as the primary technical authority for complex, high-impact cybersecurity events. Day to day, the analyst leads end-to-end incident investigations, coordinates with internal operational teams and external managed security service providers, and keeps stakeholders informed throughout the response lifecycle. Core technical work spans digital forensics, malware analysis, network traffic analysis, threat hunting, and threat intelligence, all conducted within recognised incident response frameworks. The position also provides expert guidance and oversight to junior CSIRT colleagues, elevating team capability across these disciplines. It suits an experienced security professional with deep hands-on expertise across the incident response and forensics spectrum who thrives in a complex enterprise environment. A hybrid schedule with two to three office days per week is required, based in Sydney.