Current jobs related to Incident Response Specialist - Canberra, ACT - beBeeCyberSecurity


  • Canberra, ACT, Australia beBeeCybersecurity Full time $10,900 - $99,000

    Incident Response SpecialistThis role involves providing specialist incident response expertise to contribute to the implementation of a security operations capability. Key responsibilities include delivering incident/threat detection and response activities for clients, reviewing current technical capabilities, implementing tools and technologies for...


  • Canberra, ACT, Australia beBeeCybersecurity Full time $856,700 - $1,272,250

    Incident Response SpecialistThis is a challenging role for an experienced cybersecurity professional to join our Threat Management team.As an Incident Response Specialist, you will be responsible for coordinating and responding to cyber incidents, providing technical analysis and remediation, and developing strategies to contain the incident and recover...


  • Canberra, ACT, Australia beBeeTrauma Full time $111,705 - $138,621

    Incident Response SpecialistWe are seeking an Incident Response Specialist to join our team and provide Critical Incident Response Services to support clients during incidents or organisational change.About the RoleThis part-time fixed term contract involves assessing workplace issues and identifying suitable intervention programs, providing solution-focused...


  • Canberra, ACT, Australia Bae Systems Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.**Incident Response...


  • Canberra, ACT, Australia Bae Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts.We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.Incident Response Specialist Role...


  • Canberra, ACT, Australia BAE Systems Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.Incident Response SpecialistRole...


  • Canberra, ACT, Australia BAE Systems Full time $104,000 - $130,878 per year

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.Incident Response SpecialistRole...


  • Canberra, ACT, Australia BAE Systems Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.Incident Response SpecialistRole...


  • Canberra, ACT, Australia BAE Systems - Applied Intelligence Full time

    BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Incident Response Specialist ...


  • Canberra, ACT, Australia BAE Systems Digital Intelligence Full time

    Join to apply for the Incident Response Specialist role at BAE Systems Digital Intelligence8 hours ago Be among the first 25 applicantsJoin to apply for the Incident Response Specialist role at BAE Systems Digital IntelligenceBAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries...

Incident Response Specialist

3 weeks ago


Canberra, ACT, Australia beBeeCyberSecurity Full time $100,000 - $120,000
Job Title: Cyber Security Incident Responder

We are seeking a talented and experienced individual to join our security consulting team as a Cyber Security Incident Responder.

The role will be responsible for supporting our incident response capabilities in-country, overseeing both our response to incidents and the growth and development of the capability to ensure it remains equipped and prepared to respond to incidents whenever and wherever they occur.

Key Responsibilities:
  • Leading the investigation of cyber-attacks against customers as part of the global incident response team, with a focus on Australia-based customers.
  • Monitoring SIEM platforms for security concerns, providing tuning based on system performance, and developing new detection content based on changes in the threat environment.
  • Developing tools, tradecraft, playbooks, and other material to support the response to and investigation of cyber security incidents.
  • Supporting the triage and containment of cyber security incidents as and when they occur, and supporting recovery and remediation efforts to restore systems to operational states.
  • Conducting forensic analysis of Windows, Linux, and macOS devices. Gathering and performing analysis of relevant log files such as operating system, firewall, proxy, and DNS logs.
  • Providing assessment and analysis of attacker tools, techniques, and procedures of different actors from hacktivist to criminal to nation-state.
  • Supervising and mentoring junior security consultants and supporting the development of their incident response skillsets.
  • Helping grow and evolve delivery capability by documenting delivery processes, feeding back lessons learned, and working with the wider team to establish best practices and repeatable processes.
Requirements:
  • Demonstrable experience in leading and supporting the response and investigation of cyber security incidents across a range of system and technology types.
  • Experience working with Splunk, including platform configuration, event review, and detection content development.
  • Experience using forensic tools such as EnCase, Axiom, and Cellebrite UFED, and their use in gathering and preserving digital forensic artefacts to facilitate or support investigative activities.
  • Awareness of EDR tools such as Crowdstrike, Carbon Black, Microsoft Defender for Endpoint, and Cylance.
  • Ability to write incident response reports concisely and proficiently, as well as use (or generate) graphics to illustrate scenarios or datasets.
  • Detailed knowledge of the cyber security product landscape, including familiarity with Azure and Amazon Web Services.
  • Experience in developing, maintaining, and exercising incident response plans, playbooks, and other tradecraft.
  • Familiarity with the Australian Government Information Security Manual.
  • Experience working with large groups of varied stakeholders, coordinating resources, and achieving shared goals.
  • Experience with working with end-users and clients, offering advice, guidance, and thought leadership. Ability to communicate complicated technical challenges in business language for a range of stakeholders from IT teams to C-level executives.
  • Excellent verbal and written communication and client-facing skills, including Microsoft Office suite use (Word/Excel/PowerPoint/Visio), ensuring a clear and professional quality of written materials.
  • Time management and organizational skills to independently manage multiple delivery projects concurrently.
  • Detail-oriented approach.
  • Self-starter with ability to identify problems early and come up with solutions using own initiative.
  • Familiarity with the threat landscape and knowledge of threat actors and campaigns.