{"id":2976957,"url":"https://alion.io/job/scyne-manager-digital-forensics-and-incident-response","title":"Manager - Digital Forensics and Incident Response","company":{"id":692239,"name":"Scyne","domain":"scyne.com.au","url":"https://alion.io/company/scyne","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Perth, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":76000,"max_usd":176000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false}],"status":"live","first_seen_at":"2026-10-21T03:56:27Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-02T07:15:41Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"One purpose, one practice\nWe are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.\nOur purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices:\nTransformation\nRisk, Programs and Cyber\nCommercial, Financial and Infrastructure\nThe Team\nOur Cyber capability is a leader in trust-based services to the public and for-purpose sector, we are here to support clients whenever a concern or big decision arises. We support clients to achieve outcomes for communities that are increasingly seeking trusted sources of information around issues like organisational integrity, cyber risk, integrity of data, commitment to sustainability and climate change, as well as the efficiency and effectiveness of transformation programs.\nThrough our national security operations program, we apply our 'Plan | Practice | Perform' model to help our clients build the capability and confidence needed to successfully prepare for, respond to, and recover from a variety of cyber threats. This includes the provision of full-service 24/7 DFIR and Security Operations support to our clients, in both remote and on-site settings.\n As a Manager - Digital Forensics and Incident Response, you will create value by:\nLeveraging your technical DFIR skills to help our clients respond to a variety of cyber incidents, providing clients with both hands-on support and expert advice. \nFollowing recognised DFIR frameworks, methodology and practices, including applicable NIST frameworks, ISO/IEC 27035 and MITRE ATT&CK.\nWorking within highly sensitive and regulated environments, across a variety of government and public purpose sectors, adhering to relevant policies and procedures. \nSupporting the growth and professional development of more junior team members, as they expand their DFIR skills and experience.\nWorking collaboratively with peers and teams across Scyne and our alliance partners, to ensure we engage all necessary capabilities to support clients' needs. \nSupporting the development of new capabilities, products and services based on market demand. \n About you\nAligned to our values, you're collaborative in nature and love working in and celebrating as a team. You respect and care for your colleagues and are curious about others’ views and reflect on the impact we have on others.\nYou have a growth mindset. You're interested in asking questions to challenge our thinking and love new ideas and trying new things. You're curious about and able to put yourself in the clients’ shoes; you earn and value the trust placed in us.\nYou're someone who does what you say you'll do, and you do the right thing when no-one is looking, and you call it when you feel something isn’t quite right.\nTechnically, you will bring to the position:\n5+ years of proven industry experience working in incident response, digital forensics or security operations. \nA ‘hands-on’ set of technical skills in contemporary technologies including networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools. \nA sound base of knowledge on digital forensics and data analysis practices, as well as hands-on experience and capability with the tooling used to support these activities. \nA sound foundation in relevant industry frameworks such as MITRE ATT&CK and NIST SP 800-61. \nBasic project management skills and the proven ability to lead a team of people in the delivery of a small project. \nQualifications and certifications in recognised and relevant industry accreditations such as GCIH, GCFA, Security+, CIH, or other related security operations certifications. \nThe ability to participate in a 24/7 on-call roster to support after-hours engagements and client response activities - including occassional after-hours office or client site attendance.\nPlease note: The position requires you to have an Australian Citizenship and be willing to undertake Baseline (or preferably NV1) clearance to support work with Defence. For more information, please go to www.agsva.gov.au/applicants/eligibility-and-suitability\n Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).\nFlex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.\n Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!\nSmart Device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.\nWellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.\nSonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.\nScyne Advisory: Our Commitment to Diversity, Inclusion, and Impact\nWe champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.\nWe are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.\nOur recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.\nFor recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.","description_format":"text","description_chars":7373,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[{"name":"Australia","iso":"AU"}],"relocation_offered":false,"industries":["Incident Response","Digital Government","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-21T05:11:28Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":12,"expected_fill_days":70,"reasons":["conf:3","wave","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/scyne-manager-digital-forensics-and-incident-response","json_url":"https://alion.io/job/scyne-manager-digital-forensics-and-incident-response.json","meta":{"generated_at":"2026-11-02T07:28:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10594,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":692239},"rest":"https://alion.io/mcp/rest/get_company?id=692239"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscyne-manager-digital-forensics-and-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscyne-manager-digital-forensics-and-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscyne-manager-digital-forensics-and-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scyne-manager-digital-forensics-and-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscyne-manager-digital-forensics-and-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2976957}},{"tool":"search_jobs","arguments":{"company":"scyne.com.au","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2976957},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}