KPMG Australia's Digital Forensics and Incident Response (DFIR) Team supports organisations in identifying, investigating, and mitigating cyber threats and incidents. Through leveraging expertise in digital forensics, incident response and threat intelligence, we help organisations enhance their cybersecurity resilience and respond effectively to cyber incidents – this includes:
- Optimising existing incident response processes and systems, and adopting advanced technologies to detect, respond to, and recover from cyber incidents.
- Providing proactive threat intelligence, vulnerability assessments, and risk management strategies to minimise exposure to cyber threats.
- Performing in-depth forensic analysis to uncover the root cause of incidents, ensuring compliance with regulatory requirements, and supporting legal proceedings when necessary.
- Developing and maintaining advanced detection systems and processes to proactively identify and mitigate cyber threats, leveraging automation, analytics, and emerging technologies (including Microsoft Defender, Splunk, etc.).
- Combining technical expertise with strategic insights to deliver tailored solutions for our clients that address the evolving cyber threat landscape and safeguard against future cyber risks.
- Supporting the continued growth of KPMG’s DFIR practice by contributing to team management, the development of innovative offerings, relationship building, and thought leadership publications.
Your Opportunity
As a Senior Consultant / Manager within KPMG’s DFIR team, you will:
- Work within a national team of experienced DFIR professionals dedicated to supporting organisations in managing and mitigating cyber threats through advanced DFIR and cybersecurity solutions.
- Lead and support investigations into cyber incidents, including data breaches, ransomware attacks, and insider threats. Provide detailed technical analysis to identify root causes, assess the impact, and recommend remediation strategies.
- Conduct forensic analysis of digital devices, networks, and systems to uncover evidence of malicious activity. Ensure the integrity and admissibility of evidence for potential legal proceedings.
- Assist clients in developing, testing, and optimising incident response plans. Provide on-site and remote support during live incidents to contain, eradicate, and recover from cyber threats.
- Collaborate with clients to conduct post-incident reviews, identify lessons learned, and recommend improvements to enhance their security posture and incident response capabilities.
- Leverage threat intelligence to identify adversarial tactics, techniques, and procedures (TTPs) and provide actionable insights to mitigate future risks.
- Act as a trusted advisor to clients, providing expert guidance on cybersecurity best practises, regulatory compliance, and risk management strategies.
How are you extraordinary?
- You thrive as part of a collaborative and multidisciplinary team, building strong relationships both internally and externally to deliver impactful results.
- You recognise the critical role DFIR plays in identifying, mitigating, and responding to cyber threats, helping organisations protect their assets and reputation.
- You are passionate about advancing your knowledge and expertise in digital forensics, incident response, and cybersecurity, staying ahead of emerging threats and technologies.
- You value the importance of clear and effective communication to share insights, inspire action, and drive meaningful change. You excel at distilling complex technical findings into concise, actionable recommendations for diverse audiences.
- You consistently deliver high-quality, client-ready outputs and are confident presenting your findings and recommendations to senior leadership teams for review and decision-making.
Your Experience
At KPMG, we believe diversity of thought, background and unique experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities.
Ideally, the successful candidate will have a range of skills, experience and qualifications including:
- Experience in Digital Forensics, Incident Response, or cybersecurity investigations within a professional consulting environment, a corporate security team, a government agency, or law enforcement. Proven experience in digital forensics, incident response, or cybersecurity consulting.
- Strong technical expertise in forensic tools, techniques, and methodologies, which could include malware analysis, memory forensics, and network traffic analysis.
- Proven experience in designing, implementing, and/or optimising detection systems to identify and mitigate cyber threats, leveraging tools such as SIEM, EDR, and IDS/IPS, as well as automation and analytics technologies.
- Familiarity with incident response frameworks such as ISO 27035, and interaction with the output of industry bodies such as NIST or SANS.
- Knowledge of threat intelligence platforms and tools, as well as experience with OSINT techniques.
- Excellent problem-solving and analytical skills, with the ability to communicate complex technical findings to non-technical stakeholders.
- Experience in working under pressure in high-stake environments, with a focus on delivering timely and effective solutions.