# Cybersecurity Lead Investigator*Microsoft***Australia**Lead/Principal · Full-time### The RoleThe lead investigator orchestrates end-to-end incident response engagements, setting investigation objectives, correlating disparate evidence and building cohesive timelines.
They serve as the primary technical point of contact for customers — including executives, legal and compliance teams — while coordinating threat hunters, reverse engineers and infrastructure specialists across global follow-the-sun operations.### Skills & ExperienceCandidates require deep technical expertise in enterprise on-premises and cloud environment investigations, adversary activity assessment, compromise scoping and data exfiltration analysis.
Experience with Microsoft Defender technologies is advantageous. A relevant degree in Computer Science, Computer Security, Statistics or Mathematics forms the academic baseline, alongside substantial hands-on incident response experience.### Who It SuitsThis role suits a seasoned incident responder who combines strong forensic analytical judgement with the communication skills to brief executive stakeholders under pressure.
Those who enjoy mentoring colleagues, shaping team methodology and operating within a globally distributed, mission-driven security organisation will thrive here.
Typical advertised salary forIncident Response roles in Australia:**A$95,000–A$129,000**(median A$125,000 — from11 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Australia →Learn More/Apply
Cybersecurity Lead Investigator in Melbourne employer: Forensic Focus
Check Point Software is an exceptional employer for Digital Forensics (DFIR) / Incident Response Analysts, offering a dynamic work culture that fosters innovation and collaboration in the heart of Sydney. With a strong commitment to employee growth, the company provides extensive training opportunities and encourages professional development, ensuring that team members are well-equipped to tackle complex global incidents. Additionally, the onsite environment promotes teamwork and camaraderie, making it an ideal place for seasoned professionals looking to make a meaningful impact in cybersecurity.
