Senior DFIR Analyst

About the role

Our Senior DFIR Analyst role offers the chance to confront modern cyber criminals head‑on. You will lead investigations into Business Email Compromise, ransomware, and web application breaches, driving evidence collection, containment, forensic analysis and reporting.

Key responsibilities

• Collect and preserve digital evidence from host and network sources.
• Perform malware analysis and review cloud and application logs.
• Use industry‑leading tools for log ingestion, threat hunting and endpoint detection and response.
• Contribute to strategy and methodology across a range of incident types.

Required profile

• Hands‑on experience with CrowdStrike Falcon for endpoint investigation, threat hunting and incident containment.
• Real‑world experience in incident response, digital forensics or a security operations centre.
• Strong communication skills and ability to convey technical concepts to diverse audiences.

Required skills

• CrowdStrike Falcon (including Real Time Response)
• KAPE, AXIOM, SOF‑ELK, Velociraptor, SentinelOne
• Host‑based and network‑based forensics on Windows (Linux/macOS a plus)
• Malware analysis and cloud/application log review

What we offer

• Flexible, remote‑friendly environment – work fully remote or from our A‑grade office in Australia Square, Sydney.
• Great Place to Work certified and Top 10 Best Workplace in Australia 2024 & 2025.
• Exposure to high‑impact, high‑urgency incidents across industries.
• Strong learning and development culture with access to leading tooling, training and thought leadership.
• Mental health days and flexible working arrangements.