Manager - Digital Forensics and Incident Response

One purpose, one practice

We are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

Our purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices:

• Transformation
• Risk, Programs and Cyber
• Commercial, Financial and Infrastructure

The Team

Our Cyber capability is a leader in trust-based services to the public and for-purpose sector, we are here to support clients whenever a concern or big decision arises. We support clients to achieve outcomes for communities that are increasingly seeking trusted sources of information around issues like organisational integrity, cyber risk, integrity of data, commitment to sustainability and climate change, as well as the efficiency and effectiveness of transformation programs.

Through our national security operations program, we apply our 'Plan | Practice | Perform' model to help our clients build the capability and confidence needed to successfully prepare for, respond to, and recover from a variety of cyber threats. This includes the provision of full-service 24/7 DFIR and Security Operations support to our clients, in both remote and on-site settings.

As a Manager - Digital Forensics and Incident Response, you will create value by:

• Leveraging your technical DFIR skills to help our clients respond to a variety of cyber incidents, providing clients with both hands-on support and expert advice.
• Following recognised DFIR frameworks, methodology and practices, including applicable NIST frameworks, ISO/IEC 27035 and MITRE ATT&CK.
• Working within highly sensitive and regulated environments, across a variety of government and public purpose sectors, adhering to relevant policies and procedures.
• Supporting the growth and professional development of more junior team members, as they expand their DFIR skills and experience.
• Working collaboratively with peers and teams across Scyne and our alliance partners, to ensure we engage all necessary capabilities to support clients' needs.
• Supporting the development of new capabilities, products and services based on market demand.

About you

Aligned to our values, you're collaborative in nature and love working in and celebrating as a team. You respect and care for your colleagues and are curious about others’ views and reflect on the impact we have on others.

You have a growth mindset. You're interested in asking questions to challenge our thinking and love new ideas and trying new things. You're curious about and able to put yourself in the clients’ shoes; you earn and value the trust placed in us.

You're someone who does what you say you'll do, and you do the right thing when no-one is looking, and you call it when you feel something isn’t quite right.

Technically, you will bring to the position:

• 5+ years of proven industry experience working in incident response, digital forensics or security operations.
• A ‘hands-on’ set of technical skills in contemporary technologies including networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools.
• A sound base of knowledge on digital forensics and data analysis practices, as well as hands-on experience and capability with the tooling used to support these activities.
• A sound foundation in relevant industry frameworks such as MITRE ATT&CK and NIST SP 800-61.
• Basic project management skills and the proven ability to lead a team of people in the delivery of a small project.
• Qualifications and certifications in recognised and relevant industry accreditations such as GCIH, GCFA, Security+, CIH, or other related security operations certifications.
• The ability to participate in a 24/7 on-call roster to support after-hours engagements and client response activities - including occassional after-hours office or client site attendance.

Please note: The position requires you to have an Australian Citizenship and be willing to undertake Baseline (or preferably NV1) clearance to support work with Defence. For more information, please go to www.agsva.gov.au/applicants/eligibility-and-suitability

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.