Job Opportunities API

Our Purpose   Here at Datacom we connect people and technology in order to solve challenges, create opportunities and discover new possibilities for the communities we live in.   Our Team   Datacom’s Cybersecurity Defence Operations Centre (CDOC) operates across Australia & New Zealand where we provide a full stack of cybersecurity services including managed SOC/SIEM/EDR/XDR, threat intelligence, and digital forensics & incident response (DFIR).  Our Cybersecurity Defence Operations Centre is a well-established team made up of Cybersecurity Analysts, Platforms Engineers, Automation Specialists, Solutions Delivery Engineers, Threat Intel Analysts, Threat Hunters, & Incident Responders who have been managing customers, both commercial and government, for over 10+ years.  We partner with industry leaders to provide our services and to provide you with a broad technical skillset, certifications, and experience.  About The Role   We are currently looking for a highly skilled and motivated individual to join our Cybersecurity Incident Response Team (CSIRT) as a Senior Cybersecurity Incident Responder. CSIRT provide proactive and reactive expertise to help organisations respond to major cybersecurity incidents.  In this role you will be responsible for the delivery of digital forensics & incident response (DFIR) engagements, and proactive advisory engagements such as the delivery of tabletop exercises, compromise assessments & threat hunting, breach readiness assessments, threat intelligence briefings, & threat modelling. You will be expected to lead DFIR engagements across either Australia or New Zealand.   We are seeking a candidate who has extensive experience investigating and responding to major cybersecurity incidents, and possesses excellent communication, analytical, and problem-solving skills.  What You’ll Do   As a Senior Cybersecurity Incident Responder, you will:  Conduct thorough investigations into major security incidents, determining root causes, impact, and mitigation strategies. Providing expertise and support to contain, eradicate, and recover from such security incidents.  Conduct analysis of affected systems utilising forensic techniques to thoroughly examine system events and adversary activities.  Utilise security tooling such as EDR, SIEM, XDR, & Identity technologies to assist your investigation of confirmed or suspected compromises.  Undertake log & correlation analysis and construct a timeline of adversary activities.  Identify intrusion vectors & root causes and develop recommendation actions to prevent similar incidents.  Collect digital forensics evidence from affected systems in accordance with industry standards for image acquisition and preservation of digital evidence.  Produce comprehensive, detailed DFIR reports outlining the investigative steps undertaken, your findings, and recommendations.  Support the coordination of containment, eradication and recovery efforts based on available information and established processes.   Analysis of incident response effort, with feedback from the customer and third parties as part of Post Incident Reviews (PIRs) and Lessons Learned.  Deliver proactive incident response services which include tabletop exercises, threat hunting, compromise assessments, breach readiness assessments, threat intelligence briefings, and threat modelling.  Communicate with senior stakeholders within Datacom and our customers.  Work with other members of the CSIRT team, to develop the technical capabilities of the CSIRT - including improving the processes and technology to deliver successful outcomes to customers and stakeholders.  Participate in an on-call roster for major incident response.  Occasional planned or last-m