Principal Consultant (DFIR specialist) - Capability & Education

Principal Consultant (DFIR specialist) - Capability & Education

DFIR practitioner wanted to design and deliver incident response training, exercises and capability uplift for CyberCX clients

11th August, 2026

CyberCX is looking for a Principal Consultant to join our Cyber Capability, Education and Training practice - someone who's spent real time in the trenches of incident response and now wants to turn that expertise into training, exercises, and capability uplift for our clients.

This isn't a delivery role. You won't be leading investigations or running live incident response. Instead, you'll draw on your DFIR background to design and deliver training that resonates - content that's credible with technical teams and clear to executive audiences, because you've actually done the work you're teaching.

Applications welcome from candidates based at any CyberCX office.

What you'll be doing

• Facilitating cyber incident response exercises and building DFIR-related training materials grounded in real-world experience
• Designing and delivering engaging DFIR training content alongside subject matter experts from across CyberCX
• Shaping CCET's methods and practices, and helping position the team as a thought leader in cyber capability uplift
• Building learning campaigns and service offerings that demonstrate real value to clients
• Partnering with our Customer Sales team in a pre-sales capacity - client meetings, proposal reviews, tender responses
• Growing our network of partners, suppliers and vendors, and recommending third-party products where they add value
• Mentoring junior CCET team members and sharing your knowledge across the business
• Contributing to Practice growth - revenue, utilisation, and margin - while staying current on DFIR and incident response trends

What you'll bring

• A strong professional background in DFIR - enough hands-on incident response experience to speak with genuine credibility
• A passion for teaching, mentoring, and translating technical depth into content that lands with different audiences
• Confidence engaging both technical practitioners and executive stakeholders
• Experience (or strong interest) in curriculum design, training delivery, or capability-building programs
• Commercial instincts - you can spot an opportunity, support a pitch, and help grow a practice, not just deliver a workshop

Please note that due to the nature of this role, it is amandatoryrequirement that all applicants areAustralian citizenswith the ability to hold anAustralian Government Security Clearance.