Quick overview
Job description
DISCOVERmoreopportunities toDEVELOPyour talentsandTHRIVEin a dynamic legallandscape.
Aboutthe roleAs an Incident Response Engineer, you will be responsible for supportingand enhancing the firm's cyber security incident responsecapabilities. Working closely with Digital and Technologycolleagues and technical teams across the business, you willinvestigate potential security incidents, identify adversaryactivity, and help protect the integrity of the firm's informationtechnology assets.
You will alsocontribute to the design and maintenance of incident responseplatforms and processes that enable rapid and effective responsesto cyber security events.
Whatdoes the role involve?- Conductdigital forensic investigations and examinations.
- Analysefiles and systems for malicious activity, including malwareanalysis.
- Investigate potentialcyber security incidents and suspected breaches.
- Anticipate threat actorbehaviour and recommend appropriatecountermeasures.
- Lead orsupport containment and recovery efforts following networkintrusions.
- Documentfindings and present incident reports to seniorstakeholders.
- Supportdata collection activities for client transfers and internaleDiscovery matters.
- Collaborate withtechnical teams to assess risks and respond to emergingthreats.
- Contribute to thecontinuous improvement of incident response procedures,documentation, and reporting metrics.
We value ourculture at K&L Gates and are proud of our friendly andrespectful reputation. We are looking for a likeminded individualwho is able to work collaboratively in a team to get thingsdone.
You should bepractical, resilient and proactive in your approach in addition todemonstrating strong problem-solving skills, attention to detailand work well in a team.
To besuccessful in this role, you will bring:
- Aminimum of two years' experience in a technical or cybersecurity-related role.
- Bachelor's degree inInformation Technology, Cyber Security, Computer Science, or arelated discipline.
- Hands-onexperience with CrowdStrike Falcon, including Falcon InsightXDR, Real-Time Response (RTR), Identity Threat Detection,NG-SIEM, and Falcon Forensics.
- Proficiency withMicrosoft Purview Insider Risk Management, including policyconfiguration, alert triage, case management, adaptiveprotection, and Activity Explorer.
- Strong understanding of UEBA (User and Entity BehaviourAnalytics) concepts and behavioural indicator development.
- Experience building andtuning insider threat detection use cases and risk scoringframeworks.
- Proficiency in digitalforensics across endpoint, network, email, and cloud, onWindows, macOS, and Linux.
- Familiarity withforensic tools such as EnCase, FTK, X-Ways, Axiom, orVelociraptor.
- Knowledge of DLP (DataLoss Prevention) integration with insider threatworkflows.
- Abilityto correlate endpoint, identity, email, and cloud signals toidentify insider risk patterns.
- Experience coordinatingwith Legal, HR, Privacy, and Compliance stakeholders duringinsider investigations.
- Understanding of legalhold procedures, chain-of-custody documentation, and evidencehandling standards.
- Knowledge of regulatoryand compliance frameworks such as GDPR, ISO 42001, and ISO2700.
K&L Gatespromotes equal opportunities for all employees to progress in theircareers.
Initiativesinclude:
- Structured mentoringprogram
- Flexibleworking options
- 26 weekspaid parental leave
- MomentumProgram for women and men who are taking a period of parentalleave and wish to stay on career track
- Salarycontinuance insurance
- Socialevents - social club and sporting teams
K&L Gatesis a fully integrated global law firm with lawyers located acrossNorth America, Europe, Asia, Australia and the Middle East. InAustralia, we have offices in Sydney, Melbourne, Brisbane andPerth, providing clients with deep local market knowledge supportedby the resources and reach of a global platform.
At K&LGates, collaboration is at the heart of everything we do. Ourlawyers work seamlessly across practices, offices and jurisdictionsto deliver innovative and practical solutions for clients. Wefoster an inclusive, high-performing culture where individuals areempowered to grow their careers while contributing to meaningfulwork for leading organisations across Australia and around theworld.
Doyou like what you see?Referrals fromagencies are not accepted at this time.
K&LGates reserve the right to close advertising earlier at our discretion.
K&LGates is an equal opportunity employer and promotes the safety,wellbeing and inclusion of those with a disability. We welcomeapplications from people who have an Indigenous and/or culturallyand linguistically diverse background.
Stay safewhen applying on-line and be aware of jobs and employment relatedscams via scamwatch.gov.au
Similar jobs
- DO

Senior Wintel & Security EngineerRecently posted Auto Apply
Downer · Canberra · Hybrid 🇦🇺
RecruitingComplianceWindows Server+1TechnologySalary not listed - WG

Senior Penetration TesterRecently posted Auto Apply
Westpac Group · Sydney · Hybrid 🇦🇺
DockerAWSOWASP+5TechnologySalary not listed - TL

Cyber Business PartnerRecently posted Auto Apply
The Lottery Corporation · Brisbane · Hybrid 🇦🇺
EncryptionAgileTechnologySalary not listed - HO

Field Engineer - Security SystemsRecently posted Auto Apply
Honeywell · Cannon Hill · Hybrid 🇦🇺
SQLAutoCADCopyright+2Salary not listed - TA

Cyber Security Engineer DevSecOps & Cloud SecurityRecently posted
Talenza · Brisbane · Hybrid 🇦🇺
TechnologySalary not listed - EA
Senior Cyber Threat AnalystRecently posted
Experis Australia Pty Ltd. · Canberra, Australian Capital Territory · Hybrid 🇦🇺
GCPAWSActive Directory+5TechnologySalary not listed - FF

Hybrid Digital Forensics Analyst - DFIR & Incident ResponseRecently posted
Forensic Focus · Melbourne · Hybrid 🇦🇺
LinuxTechnologySalary not listed - AG
Microsoft Security Engineer - Hybrid SecOps & AI GovernanceRecently posted
Ambition Group Limited · North Sydney, New South Wales · Hybrid 🇦🇺
Microsoft OfficeAzureTechnologySalary not listed - AG
Cyber Security EngineerRecently posted
Ambition Group Limited · North Sydney, New South Wales · Hybrid 🇦🇺
Microsoft OfficeAzureTechnologySalary not listed - QG
Technical Lead - Network SecurityRecently posted Auto Apply
Qantas Group · Melbourne, Victoria · Hybrid 🇦🇺
Stakeholder ManagementDNSWAF+1TechnologySalary not listed - QG
Technical Lead - Network SecurityRecently posted Auto Apply
Qantas Group · Sydney, New South Wales · Hybrid 🇦🇺
Stakeholder ManagementDNSWAF+1TechnologySalary not listed - CP
Security Sales Engineer, Exposure ManagementRecently posted Auto Apply
Check Point Software Technologies · Melbourne, VIC · Hybrid 🇦🇺
SalesSalary not listed
