Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

We are seeking a Senior Cybersecurity Incident Responder to join our Cybersecurity Incident Response Team (CSIRT). This role involves delivering digital forensics & incident response (DFIR) engagements and proactive advisory services, including tabletop exercises, compromise assessments, threat hunting, breach readiness assessments, threat intelligence briefings, and threat modelling. The position requires leading DFIR engagements across Australia or New Zealand and demands extensive experience in investigating and responding to major cybersecurity incidents, coupled with excellent communication, analytical, and problem-solving skills.

Responsibilities

Conduct thorough investigations into major security incidents, determining root causes, impact, and mitigation strategies.
Provide expertise and support to contain, eradicate, and recover from security incidents.
Conduct analysis of affected systems utilizing forensic techniques to examine system events and adversary activities.
Utilize security tooling such as EDR, SIEM, XDR, & Identity technologies for investigations.
Undertake log & correlation analysis and construct a timeline of adversary activities.
Identify intrusion vectors & root causes and develop recommendation actions.
Collect digital forensics evidence from affected systems in accordance with industry standards.
Produce comprehensive, detailed DFIR reports outlining investigative steps, findings, and recommendations.
Support the coordination of containment, eradication and recovery efforts.
Analyze incident response effort and provide feedback from customers and third parties for Post Incident Reviews (PIRs) and Lessons Learned.
Deliver proactive incident response services including tabletop exercises, threat hunting, compromise assessments, breach readiness assessments, threat intelligence briefings, and threat modelling.
Communicate with senior stakeholders within Datacom and customers.
Collaborate with CSIRT team members to develop technical capabilities, improving processes and technology.
Participate in an on-call roster for major incident response.
Undertake occasional planned or last-minute/urgent travel to customer sites within Australia and New Zealand.

Requirements

Extensive experience investigating and responding to major cybersecurity incidents.
Excellent communication, analytical, and problem-solving skills.
Confidence in communicating with senior stakeholders, including Senior Leadership teams in difficult / tense situations.
Proven experience in responding to high-profile cybersecurity incidents with significant operational or privacy impacts (e.g., ransomware & data breaches).
Experience in digital forensics & incident response (DFIR) with an understanding of key system & digital forensic artifacts.
Experience using DFIR tools such as EnCase, X-Ways, Magnet Axiom, Velociraptor, KAPE, & THOR.
Proven knowledge and experience of efficiently searching large datasets across multiple log sources and underlying platforms including XDR/EDR and SIEM products.
A strong understanding of current and emerging attacker behaviours, tools, tactics, and techniques.
An understanding of various security frameworks and methodologies such as NIST CSF, MITRE ATT&CK and D3FEND, Unified Kill Chain and OWASP Top 10.
Basic scripting or automation skills are desirable (e.g., PowerShell, Bash, Python, or Ruby).
SANS GCFA, GCFE, GCIH, or relevant DFIR certifications are desirable.

Skills

Digital Forensics
Incident Response
EDR
SIEM
XDR
Identity Technologies
Log Analysis
Correlation Analysis
Threat Hunting
Compromise Assessments
Breach Readiness Assessments
Threat Intelligence Briefings
Threat Modelling
Forensic Techniques
EnCase
X-Ways
Magnet Axiom
Velociraptor
KAPE
THOR
CrowdStrike
Microsoft Defender
Splunk
Sentinel
NIST CSF
MITRE ATT&CK
D3FEND
Unified Kill Chain
OWASP Top 10
PowerShell
Bash
Python
Ruby

Location

Australia
New Zealand

Work Type

Full-time
Onsite
Remote
Hybrid

Experience Level

Senior

Benefits

Social events
Chill-out spaces
Remote working
Flexi-hours
Professional development courses

About the Company

Datacom is one of Australia and New Zealand’s largest suppliers of Information Technology professional services.
We maintain a dynamic, agile, small business feel within a large organisation.
Our people give Datacom its unique culture and energy.
We operate at the forefront of technology to help Australia and New Zealand’s largest enterprise organisations explore possibilities and solve their greatest challenges.

Equal Opportunity

We want Datacom to be an inclusive and welcoming workplace for everyone and take pride in the steps we have taken and continue to take to make our environment fun and friendly, and our people feel supported.