The Role
This position supports global incident response operations, performing live-endpoint and offline forensic investigations, identifying key artifacts, and guiding remediation. The analyst contributes to developing IR methodologies, documentation, and a ticketing system, while collaborating with third parties on breaches and business email compromise cases.
Skills & Experience
Requires 2-3 years of DFIR experience, EDR deployment and management, familiarity with the NIST framework, SIEM, firewalls, VPNs, virtualization, and networking technologies. Forensic investigation experience spans on-premises and cloud environments. GCIH and GCFE certifications are preferred.
Who It Suits
Suited to a proactive DFIR practitioner comfortable in a metrics-driven, fast-paced environment, able to work across multiple time zones, support clients directly, and contribute to evolving incident response processes within a global team.
#J-18808-Ljbffr
DFIR Analyst employer: Forensic Focus
Check Point Software is an exceptional employer for Digital Forensics (DFIR) / Incident Response Analysts, offering a dynamic work culture that fosters innovation and collaboration in the heart of Sydney. With a strong commitment to employee growth, the company provides extensive training opportunities and encourages professional development, ensuring that team members are well-equipped to tackle complex global incidents. Additionally, the onsite environment promotes teamwork and camaraderie, making it an ideal place for seasoned professionals looking to make a meaningful impact in cybersecurity.
