Job Overview & Organization Mission

CyberCX is appointing a Principal DFIR Consultant in Melbourne to lead forensic investigations into nation-state breaches and ransomware attacks.

CyberCX’s Digital Forensics & Incident Response (DFIR) practice in Melbourne is appointing a Principal Consultant. You will command the frontline response to complex cyber breaches, guiding affected corporate boards and legal counsel through containment, threat actor negotiation, and forensic reconstruction.

As a key member of the team at CyberCX in Melbourne, VIC, you will play a central role in driving excellence, upholding top-tier Australian industry standards, and contributing directly to the strategic milestones of one of the nation’s premier employers.

Key Duties & Core Responsibilities

In this critical role, your operational duties and key performance responsibilities will encompass:

• Lead crisis: Lead crisis incident response teams resolving major ransomware and corporate data breach crises.
• Perform advanced: Perform advanced digital forensics across compromised Windows, Linux, and cloud infrastructure.
• Analyze malware: Analyze malware artifacts, reverse-engineer payloads, and reconstruct adversary attack chains.
• Author comprehensive: Author comprehensive expert forensic reports for regulatory bodies (OAIC, ASD) and corporate boards.

Required Qualifications, Licenses & Experience

To be successful in this position at CyberCX, candidates are expected to satisfy the following essential selection criteria:

• Mandatory Qualification: GIAC GCFA, GCFE, GNFA, or Master of Cybersecurity.
• Relevant Experience: Minimum 5+ Years of verified industry experience in Australia or recognized overseas equivalence.
• 7+ years experience in digital forensics and incident response in consulting or government.
• Prestigious industry certifications (GIAC GCFA/GASF/GNFA, EnCE, or equivalent).
• Exceptional executive presence, crisis calm, and stakeholder management skills.

Core Competencies & Key Technical Proficiencies

The successful applicant will possess demonstrated capabilities across the following domain skill sets:

Salary, Compensation & Employee Benefits

At CyberCX, we understand that our people drive our achievements. An outstanding remuneration and wellbeing package is provided in line with Australian benchmarks:

• Competitive Remuneration: AU$175,000 – AU$215,000 per year + standard Australian Superannuation (11.5%).
• Remuneration $175,000 – $215,000 + performance bonus + superannuation.
• Work alongside Australia’s foremost cybersecurity researchers and DFIR experts.
• Melbourne Collins Street central location with comprehensive wellness allowances.
• Leave Entitlements: 4 weeks annual leave (with 17.5% annual leave loading where applicable) plus 10 days paid personal/carer’s leave.
• Flexible Work: Progressive work-life balance options with supportive corporate culture and leadership development pathways.

About the Employer: CyberCX

CyberCX is Australia’s leading provider of end-to-end cyber security services, trusted by government and major enterprise.

CyberCX is deeply committed to building diverse, equitable, and culturally inclusive work environments. We proudly celebrate diversity and welcome applications from all qualified individuals including First Nations Australians, people with disabilities, and candidates from culturally and linguistically diverse backgrounds.

Application Process & Next Steps

Applications for this position are currently open and being reviewed on a rolling basis. Suitable candidates are encouraged to apply as early as possible before the published closing date.

Please prepare an updated Curriculum Vitae (CV) and a tailored Cover Letter highlighting your relevant experience against the key selection criteria outlined above.

To proceed with your application, click the Apply on Employer Site button to access the official CyberCX careers gateway.