Digital Forensics Analyst
Triskele Labs is an Australian cyber security firm delivering Managed Detection and Response, Governance Risk and Compliance, Penetration Testing, and Digital Forensics and Incident Response. We hold CREST Cyber Security Incident Response (CSIR) accreditation.
The Digital Forensics Team
We investigate cyber incidents for clients across Australia, remotely and on site. We establish how an intrusion occurred, what the Threat Actor did, and whether data was accessed or taken. Every matter is backed by a written report that stands up to review by the client, their insurer and their legal counsel.
Work arrives from two directions. Reactive matters are referred by cyber insurers, brokers and legal panel firms, and move at pace. Proactive work is delivered to retainer clients, covering forensic readiness and response planning.
We investigate ransomware and data extortion, business email compromise, insider threat, unauthorised access, data theft, funds redirection, website and endpoint compromise, and internal investigations.
You will work alongside a highly technical and seasoned group of digital forensics practitioners. Everyone carries live matters. Digital Forensics sits alongside Incident Response within the wider DFIR practice.
Experience and Skills
- Minimum one year of experience in a digital forensics role.
- Understanding of the incident lifecycle.
- Sound understanding of Windows and Linux forensic artefacts.
- Exposure to Microsoft 365 investigation is advantageous.
- Experience acquiring and handling evidence in a forensically sound manner, including chain of custody.
- Familiarity with Threat Actor tactics, techniques and procedures.
- Business-fluent written English.
- Eligibility to work in Australia.
Tools
Experience with the following tools is relevant to the role:
- Forensic suites such as Magnet Axiom, X-Ways Forensics, and Intella are advantageous.
- Experience with acquisition, triage, and analysis tools such as KAPE, EZ Tools, Hayabusa, Velociraptor, Chainsaw, and Volatility.
- Experience investigating Microsoft 365 and Entra ID environments, including the Unified Audit Log, sign-in and audit logs, mailbox rules, delegate access, and OAuth application grants, is advantageous.
- Experience with EDR and SIEM tools such as SentinelOne, CrowdStrike, Microsoft Defender, Carbon Black, Microsoft Sentinel, Elastic, and Rapid7 is advantageous.
Training and Certifications
SANS and GIAC certifications are a significant bonus, in particular GCFE, GCFA, GCFR and GCIH. Vendor training in Magnet Axiom, X-Ways or Intella is also valued.
Two courses are mandatory for every member of the team: 13Cubed Investigating Windows Endpoints and 13Cubed Investigating Linux Endpoints. If you do not hold these, Triskele Labs will fund and enrol you.
Hours, On-Call and Overtime
Participation in the on-call rotation is voluntary.
You will work out of hours as matters require, particularly in the opening days of a ransomware or major incident matter. Out of hours work is paid as overtime.
- Join a supportive and driven team where each team member is valued.
- Collaborative and growth-oriented culture with opportunities for career development.
- Hybrid working environment, with some in-office presence expected
- Salary packaging, novated leasing available
- Access to Triskele Labs Discounts and Benefits Platform
- Ongoing training opportunities
Why Triskele Labs?
Triskele Labs is a place where passion for cybersecurity and client success thrive. Our commitment to "Deliver Awesome" drives us to exceed expectations, making a tangible difference in our clients’ security journey.
Application Process
Applications without a cover letter will be immediately disqualified. Address your cover letter to Richard Grainger, Global Head of Digital Forensics. Tell us about why you are ideal for this role.
Similar roles
Carpenter
WOOD WINGS PTY LTD·Meadowbrook, Australia
Company: WOOD WINGS PTY LTD T/A WOOD WINGS CARPENTRY & KITCHEN CABINETS Position: Carpenter Employment Type: Full-Time Location: Meadowbrook, QLD 4131 Salary: AUD $80,000 – $90,000 per annum plus superannuation About the Role Wood Wings Pty Ltd is an Australian private company specialising in carpentry and woodworking services. Based in Meadowbrook, Queensland, the business operates across Brisbane and Logan, providing…
- Full-time
- AUD 80k–AUD 90k / yr
- Skilled Independent 189 — PR, no sponsor
Lager- und Logistikkoordinator (m/w/d)
Sécheron Hasler Group·Frankfurt am Main, Germany
Die Sécheron Hasler Gruppe setzt die Schweizer Tradition von über 140 Jahren im Bereich der Bahntechnik fort. Als weltweit führender Anbieter von elektrischen und elektronischen Sicherheitskomponenten sowie Bahnstromsystemen bieten wir innovative Lösungen für die Bahnindustrie, erneuerbare Energien, Gleichstromnetze und andere industrielle Anwendungen. Der Name Sécheron Hasler Group steht weltweit für Schweizer Qualität und modernste Technologie. Mit über 1.300 Mitarbeitenden weltweit…
- Full-time
- Blue Card — tied; settle 21–33mo
Maintenance Officer - Laverton North, Melbourne
Redox·Australia
About Us Redox is a ASX listed, leading raw material and ingredients distributor with 23 staff locations throughout Australia, New Zealand, Malaysia, and United States of America. Established in 1965 with more than 400 staff and sales totalling over $1 billion dollars last financial year, we bring the best products from around the world to clients in over 170 unique…
- Full-time
- Skilled Independent 189 — PR, no sponsor
Accommodation Manager
Incluso Services Pty Ltd·Coburg, Australia
Are you ready to join Australia’s newest service provider that puts both participants and staff first? Be part of the Incluso Service journey, where we are aiming to become Australia’s leading service provider in accommodation, respite, and support services. At Incluso Services we are focused on “Building the World that we Want” and as such, ensuring that people with a…
- Hybrid
- Full-time
- Skilled Independent 189 — PR, no sponsor
Bauleitender Obermonteur Elektrotechnik & Inbetriebnahme (m/w/d)
Sécheron Hasler Group·Germany
Die Sécheron Hasler Gruppe setzt die Schweizer Tradition von über 140 Jahren im Bereich der Bahntechnik fort. Als weltweit führender Anbieter von elektrischen und elektronischen Sicherheitskomponenten sowie Bahnstromsystemen bieten wir innovative Lösungen für die Bahnindustrie, erneuerbare Energien, Gleichstromnetze und andere industrielle Anwendungen. Der Name Sécheron Hasler Group steht weltweit für Schweizer Qualität und modernste Technologie. Mit über 1.300 Mitarbeitenden weltweit…
- Hybrid
- Full-time
- Blue Card — tied; settle 21–33mo
Obermonteur Elektrotechnik (m/w/d)
Sécheron Hasler Group·Germany
Die Sécheron Hasler Gruppe setzt die Schweizer Tradition von über 140 Jahren im Bereich der Bahntechnik fort. Als weltweit führender Anbieter von elektrischen und elektronischen Sicherheitskomponenten sowie Bahnstromsystemen bieten wir innovative Lösungen für die Bahnindustrie, erneuerbare Energien, Gleichstromnetze und andere industrielle Anwendungen. Der Name Sécheron Hasler Group steht weltweit für Schweizer Qualität und modernste Technologie. Mit über 1.300 Mitarbeitenden weltweit…
- Hybrid
- Full-time
- Blue Card — tied; settle 21–33mo
Scrum Master, Insurance & Digital Channels - 167 EN
Export Development Canada | Exportation et développement Canada·Ottawa, Canada
Application deadline: September 16, 2026 12:00PM ET Join the EDC Team! At EDC, we support Canadian businesses to succeed globally. We provide the financial tools and expertise they need to explore new markets, reduce risks, all towards the goal of making Canada and the world better through trade. Position: Scrum Master, Insurance & Digital Channels Employment Type: Permanent COMPENSATION DETAILS:…
- Hybrid
- Full-time
- Express Entry — PR day one, no employer
Assistant Store Manager - Miranda
Amer Sports·Miranda, Australia
About Us: Salomon was born in 1947 in the heart of the French Alps and the birthplace of modern alpinism. At Salomon, we're all about pushing boundaries and living life to the fullest. As a leading outdoor sports brand, we design performance-driven gear that empowers adventurers around the world. We are coming to Miranda and looking to build our team!…
- Full-time
- Skilled Independent 189 — PR, no sponsor
