CERT Incident Responder

The CERT Incident Responder leads digital forensics and incident response (DFIR) readiness and advances the organisation’s Adversarial Exposure Validation (AEV) program, including Red and Purple Team activities. The role ensures detection, response, and control validation against real-world threat actor tactics, techniques, and procedures (TTPs), and supports major incident coordination with national and international partners. It also maintains forensic tooling, evidence handling processes, and incident playbooks to improve organisational resilience.