Senior DFIR Analyst
Gridware
Sydney, New South Wales
The Role
This position involves leading and supporting investigations into business email compromise, ransomware, and web application breaches. Responsibilities include evidence collection and preservation, host and network forensics, malware analysis, and reviewing cloud and application logs across the full incident response lifecycle.
Skills & Experience
Candidates need at least two years’ hands-on DFIR or SOC experience, strong Windows forensic skills, and familiarity with tools such as KAPE, AXIOM, SOF-ELK, Velociraptor, CrowdStrike Falcon, and SentinelOne. Certifications like GCFE, GCFA, or GCIH are beneficial but not mandatory.
Who It Suits
Ideal for an experienced forensic investigator who thrives on varied, high-urgency casework, enjoys working both independently and collaboratively, and wants exposure to diverse incident types across multiple industries.
Typical advertised salary for Digital Forensics roles in Australia: A$108,000–A$138,000 (median A$128,000 — from 16 recent listings analysed by Forensic Focus).
Compare Digital Forensics salaries in Australia →
Certifications mentioned: GCFA · GCFE · GCIH — find training for these on the DFIR Training Finder.