Senior Cybersecurity Incident Responder

About the role

Datacom’s Cybersecurity Defence Operations Centre is seeking a highly skilled Senior Cybersecurity Incident Responder to lead digital forensics and incident response (DFIR) engagements across Australia or New Zealand. You will work with a multidisciplinary team to help organisations detect, contain, eradicate and recover from major security incidents.

Key responsibilities

• Conduct thorough investigations of major security incidents, determine root causes, impact and mitigation strategies.
• Use forensic techniques to analyse affected systems, collect and preserve digital evidence in line with industry standards.
• Leverage security tooling such as EDR, SIEM, XDR and identity technologies to investigate confirmed or suspected compromises.
• Perform log correlation, build timelines of adversary activity and identify intrusion vectors.
• Produce detailed DFIR reports with findings, recommendations and actionable remediation steps.
• Support coordination of containment, eradication and recovery efforts.
• Deliver proactive advisory services including tabletop exercises, compromise assessments, threat‑hunting missions, breach‑readiness assessments, threat‑intelligence briefings and threat modelling.

Required profile

• Extensive experience investigating and responding to major cybersecurity incidents.
• Strong analytical, problem‑solving and communication skills.
• Proven ability to lead DFIR engagements for enterprise customers.
• Senior‑level expertise with a track record of delivering high‑impact security outcomes.

Required skills

• Forensic analysis techniques and digital evidence acquisition.
• Proficiency with EDR, SIEM, XDR and identity‑management security tools.
• Log analysis, correlation and timeline construction.
• Threat hunting, threat intelligence briefing and threat modelling.
• Experience conducting tabletop exercises and breach‑readiness assessments.