Senior Director, Advanced Threat Services, Cybersecurity

About the role

FTI Consulting is seeking a Senior Director for its Advanced Threat Services within the Australian Cybersecurity team. This senior consulting leadership position will guide a high‑performing, client‑facing team delivering offensive security, digital forensics and incident response, and security engineering services.

Key responsibilities

• Lead and manage large penetration‑testing retainer engagements and one‑off offensive security projects, including web, network, red‑team, and cloud security assessments.
• Oversee major cybersecurity incident‑response engagements such as ransomware, data extortion, cryptocurrency theft, insider threat, business‑email compromise, and accidental data disclosure.
• Direct security‑control uplift initiatives with a focus on cloud security engineering.
• Provide end‑to‑end management of technical security engagements, from scoping to reporting and client presentation.
• Perform quality assurance on offensive security, DFIR, and security‑engineering deliverables.
• Build and maintain trusted relationships with key clients, law firms, and insurance panels.
• Mentor and line‑manage a team of technical cybersecurity consultants, fostering deep technical expertise.

Required profile

• 7+ years delivering professional offensive security and/or incident‑response services in consulting or complex enterprise environments.
• Previous senior or lead experience as a penetration tester, incident responder, or cyber‑focused forensic investigator.
• Strong reporting ability to present technical analysis to non‑technical audiences.
• Ability to manage multiple client matters simultaneously with limited supervision.
• Excellent written and spoken English and willingness to travel to client sites.

Required skills

• Penetration testing, red‑team exercises, web and network security assessments.
• Digital forensics and incident response (DFIR) including ransomware, data extortion, and insider‑threat handling.
• Cloud security engineering for Microsoft 365 and AWS.
• Bypassing/using EDR tools such as CrowdStrike, SentinelOne, Carbon Black.
• Forensic tools: Volatility, FTK Imager, Cellebrite, Wireshark, EnCase, Axiom, Splunk, ELK.