Senior Cybersecurity Incident Responder

About the role

Datacom is seeking a highly skilled Senior Cybersecurity Incident Responder to join its Cybersecurity Defence Operations Centre (CDOC). You will lead digital forensics and incident response engagements across Australia or New Zealand, providing proactive advisory services such as tabletop exercises, threat hunting and breach readiness assessments.

Key responsibilities

• Conduct thorough investigations of major security incidents, determine root causes, and develop mitigation strategies.
• Perform digital forensics using tools like EnCase, X‑Ways, Magnet Axiom and produce detailed DFIR reports.
• Utilise EDR, SIEM and XDR platforms (e.g., CrowdStrike, Microsoft Defender, Splunk, Sentinel) to analyse logs, build timelines and identify intrusion vectors.
• Deliver proactive services including tabletop exercises, threat intelligence briefings and threat modelling.
• Participate in on‑call roster and travel to customer sites as required.

Required profile

• Proven experience responding to high‑profile incidents such as ransomware and data breaches.
• Strong communication skills with senior stakeholders and ability to work under pressure.
• Understanding of security frameworks such as NIST CSF, MITRE ATT&CK, D3FEND and OWASP Top 10.

Required skills

• DFIR tools: EnCase, X‑Ways, Magnet Axiom, Velociraptor, KAPE, THOR.
• Security platforms: CrowdStrike, Microsoft Defender, Splunk, Sentinel.
• Scripting/automation: PowerShell, Bash, Python, Ruby.

What we offer

• Paid parental leave and employee assistance programme.
• Ongoing learning, certifications and career development opportunities.
• Access to industry‑leading learning platforms and financial wellbeing benefits.
• Employee discounts and recognition programmes.