Cybersecurity Consultant – Incident Response & Offensive Security

About the role

FTI Consulting is seeking a Consultant in Cybersecurity to join its Sydney practice. The role focuses on incident response and offensive security engagements, supporting high‑stakes client matters across a range of industries.

Key responsibilities

• Respond to complex cyber incidents such as ransomware, data breaches, malware infections and insider threats, conducting investigations, containment and remediation.
• Perform penetration testing on corporate networks, cloud environments and applications, including adversary simulations and post‑exploitation analysis.
• Produce detailed investigative and technical reports for senior stakeholders, regulatory bodies and litigation purposes.
• Collaborate with cross‑functional teams—Cybersecurity, Forensics, Legal and IT—to deliver comprehensive response efforts.

Required profile

• Unrestricted Australian working rights and at least 12 months of full‑time professional experience in offensive security, incident response or a related cybersecurity domain.
• Strong written and verbal communication skills with the ability to produce clear, concise reports.
• Professional certifications such as OSCP, OSEP, OSWE, CREST CRT, CRTP or equivalent.

Required skills

• Network and infrastructure penetration testing.
• Web and API application security testing.
• Active Directory and identity‑focused attacks.
• Cloud security testing (AWS, Azure, GCP).
• Endpoint security and EDR evasion techniques.
• Scripting/automation: Python, PowerShell, Bash.

What we offer

• Full‑time permanent position with a salary range of $85,000–$110,000 AUD inclusive of superannuation.
• Professional development through on‑the‑job learning, mentoring and support for certifications.
• Exposure to high‑profile incident response and offensive security engagements.