Quick Overview
Job Description
DISCOVERmoreopportunities toDEVELOPyour talentsandTHRIVEin a dynamic legallandscape.
Aboutthe roleAs an Incident Response Engineer, you will be responsible for supportingand enhancing the firm's cyber security incident responsecapabilities. Working closely with Digital and Technologycolleagues and technical teams across the business, you willinvestigate potential security incidents, identify adversaryactivity, and help protect the integrity of the firm's informationtechnology assets.
You will alsocontribute to the design and maintenance of incident responseplatforms and processes that enable rapid and effective responsesto cyber security events.
Whatdoes the role involve?- Conductdigital forensic investigations and examinations.
- Analysefiles and systems for malicious activity, including malwareanalysis.
- Investigate potentialcyber security incidents and suspected breaches.
- Anticipate threat actorbehaviour and recommend appropriatecountermeasures.
- Lead orsupport containment and recovery efforts following networkintrusions.
- Documentfindings and present incident reports to seniorstakeholders.
- Supportdata collection activities for client transfers and internaleDiscovery matters.
- Collaborate withtechnical teams to assess risks and respond to emergingthreats.
- Contribute to thecontinuous improvement of incident response procedures,documentation, and reporting metrics.
We value ourculture at K&L Gates and are proud of our friendly andrespectful reputation. We are looking for a likeminded individualwho is able to work collaboratively in a team to get thingsdone.
You should bepractical, resilient and proactive in your approach in addition todemonstrating strong problem-solving skills, attention to detailand work well in a team.
To besuccessful in this role, you will bring:
- Aminimum of two years' experience in a technical or cybersecurity-related role.
- Bachelor's degree inInformation Technology, Cyber Security, Computer Science, or arelated discipline.
- Hands-onexperience with CrowdStrike Falcon, including Falcon InsightXDR, Real-Time Response (RTR), Identity Threat Detection,NG-SIEM, and Falcon Forensics.
- Proficiency withMicrosoft Purview Insider Risk Management, including policyconfiguration, alert triage, case management, adaptiveprotection, and Activity Explorer.
- Strong understanding of UEBA (User and Entity BehaviourAnalytics) concepts and behavioural indicator development.
- Experience building andtuning insider threat detection use cases and risk scoringframeworks.
- Proficiency in digitalforensics across endpoint, network, email, and cloud, onWindows, macOS, and Linux.
- Familiarity withforensic tools such as EnCase, FTK, X-Ways, Axiom, orVelociraptor.
- Knowledge of DLP (DataLoss Prevention) integration with insider threatworkflows.
- Abilityto correlate endpoint, identity, email, and cloud signals toidentify insider risk patterns.
- Experience coordinatingwith Legal, HR, Privacy, and Compliance stakeholders duringinsider investigations.
- Understanding of legalhold procedures, chain-of-custody documentation, and evidencehandling standards.
- Knowledge of regulatoryand compliance frameworks such as GDPR, ISO 42001, and ISO2700.
K&L Gatespromotes equal opportunities for all employees to progress in theircareers.
Initiativesinclude:
- Structured mentoringprogram
- Flexibleworking options
- 26 weekspaid parental leave
- MomentumProgram for women and men who are taking a period of parentalleave and wish to stay on career track
- Salarycontinuance insurance
- Socialevents - social club and sporting teams
K&L Gatesis a fully integrated global law firm with lawyers located acrossNorth America, Europe, Asia, Australia and the Middle East. InAustralia, we have offices in Sydney, Melbourne, Brisbane andPerth, providing clients with deep local market knowledge supportedby the resources and reach of a global platform.
At K&LGates, collaboration is at the heart of everything we do. Ourlawyers work seamlessly across practices, offices and jurisdictionsto deliver innovative and practical solutions for clients. Wefoster an inclusive, high-performing culture where individuals areempowered to grow their careers while contributing to meaningfulwork for leading organisations across Australia and around theworld.
Doyou like what you see?Referrals fromagencies are not accepted at this time.
K&LGates reserve the right to close advertising earlier at our discretion.
K&LGates is an equal opportunity employer and promotes the safety,wellbeing and inclusion of those with a disability. We welcomeapplications from people who have an Indigenous and/or culturallyand linguistically diverse background.
Stay safewhen applying on-line and be aware of jobs and employment relatedscams via scamwatch.gov.au
Similar jobs
- KG
Cyber Incident Response Engineer
NewK&L Gates
Sydney🇦🇺Hybrid5 hours agoTechnology - NU
Security Pipelines Engineer (Go/Python)
NewNullify, Inc
Sydney🇦🇺Hybrid5 hours agoAdministrative - SC
Email Security Engineer - Mimecast & Mail Transformation
NewShowtime Consulting
Sydney🇦🇺Hybrid5 hours agoTechnology - PR
Senior Systems & Cyber Security Specialist
NewPrattwhitney
Perth🇦🇺Hybrid5 hours agoTechnology - AI
Senior Identity and Access Management Engineer
NewAirswift
Perth🇦🇺Hybrid5 hours agoEngineering - NA
Platform Security Engineer - Kubernetes & SIEM
NewNEP Australia
Melbourne, Victoria🇦🇺Hybrid5 hours agoKubernetesTechnology - RE
Staff Security Engineer - Detection & Response (Remote)
NewREA
Melbourne, Victoria🇦🇺Remote5 hours agoTechnology - MP
Cyber Security Business Analyst for Cloud & IAM Initiatives
NewMedibank Private Limited
Victoria🇦🇺Hybrid5 hours agoTechnology - NA
Security Engineer
NewNEP Australia
Melbourne, Victoria🇦🇺Hybrid5 hours agoBashKubernetesPython+1Technology - VC
Gateway Network Security Engineer - 24/7 Hybrid Role
NewVerizon Communications
Australian Capital Territory🇦🇺Hybrid5 hours agoDNSTechnology - RE
Staff Security Engineer (Detection)
NewREA
Melbourne, Victoria🇦🇺On-site5 hours agoTechnology - RE
Senior Security Engineer - Detection & Response (Remote AU)
NewREA
Melbourne, Victoria🇦🇺Remote5 hours agoTechnology