Incident Response Lead

• Drive containment, eradication, and recovery efforts during cyber events
• Act as liaison between technical teams and leadership, delivering clear updates and trusted guidance
• Gather forensic artefacts, reconstruct attack chains, and provide expert input into investigations
• Conduct postmortems, document lessons, and recommend improvements to strengthen resilience
• Create clear and concise incident reports, guidance, and updates for technical and non-technical audiences
• Design and run tabletop exercises and workshops to build team capability and organisational awareness
• Work closely with regional peers as part of a 24/7 on-call rotation across a complex global enterprise

• 5+ years in cybersecurity, including 3+ years in incident response
• Proven event investigation experience
• Advanced ability to categorise, investigate, and resolve incidents while preserving evidence
• Hands-on experience with SIEM, IDS/IPS, EDR, AWS, Azure, GCP, and other defence technologies
• Exceptional decision-making, problem-solving, and conflict management skills in high-stakes scenarios
• Ability to prepare detailed reports and deliver executive-level briefings to diverse stakeholders
• Strong time management, prioritisation, and leadership abilities to guide cross-functional teams
• Bachelor’s degree in a related field or equivalent experience
• Certifications such as CISSP, GCIH, or GCFA highly regarded
• Ability to work as part of a 24/7 on-call rotation

• A fully remote role, giving you the flexibility to be based anywhere in Australia
• A vibrant, music-focused workplace fostering creativity and collaboration
• Opportunities for professional development and career advancement
• Access to concerts, events, and other entertainment perks
• A flexible approach to when and where you work, designed to support balance in all aspects of life
• A diverse, equitable workplace where every voice matters
• Comprehensive benefits, from volunteer days to wellness programs and mental health support