At a Glance
- Tasks: Lead incident response engagements and coordinate with global security teams.
- Company: Join Microsoft, a leader in tech innovation and cybersecurity.
- Benefits: Competitive salary, professional growth, and a dynamic work environment.
- Other info: Ideal for seasoned responders who thrive in a mission-driven culture.
- Why this job: Make a real impact in cybersecurity while mentoring and shaping team strategies.
- Qualifications: Deep technical expertise in cybersecurity and strong communication skills.
The predicted salary is between 95000 - 129000 $ per year.
The lead investigator orchestrates end-to-end incident response engagements, setting investigation objectives, correlating disparate evidence and building cohesive timelines. They serve as the primary technical point of contact for customers — including executives, legal and compliance teams — while coordinating threat hunters, reverse engineers and infrastructure specialists across global follow-the-sun operations.
Candidates require deep technical expertise in enterprise on-premises and cloud environment investigations, adversary activity assessment, compromise scoping and data exfiltration analysis. Experience with Microsoft Defender technologies is advantageous. A relevant degree in Computer Science, Computer Security, Statistics or Mathematics forms the academic baseline, alongside substantial hands-on incident response experience.
This role suits a seasoned incident responder who combines strong forensic analytical judgement with the communication skills to brief executive stakeholders under pressure. Those who enjoy mentoring colleagues, shaping team methodology and operating within a globally distributed, mission-driven security organisation will thrive here.
Typical advertised salary for Incident Response roles in Australia: A$95,000–A$129,000 (median A$125,000 — from 11 recent listings analysed by Forensic Focus).
Cybersecurity Lead Investigator in Sydney employer: Forensic Focus
Check Point Software is an exceptional employer for Digital Forensics (DFIR) / Incident Response Analysts, offering a dynamic work culture that fosters innovation and collaboration in the heart of Sydney. With a strong commitment to employee growth, the company provides extensive training opportunities and encourages professional development, ensuring that team members are well-equipped to tackle complex global incidents. Additionally, the onsite environment promotes teamwork and camaraderie, making it an ideal place for seasoned professionals looking to make a meaningful impact in cybersecurity.
