Master of Cyber Security and Forensics

The Master of Cyber Security and Forensics at the University of the Sunshine Coast is a two-year postgraduate degree for people who want to work on the defensive side of computing, investigating incidents, securing systems, and handling digital evidence properly. You will study network security, digital forensics, incident response, and the legal and ethical rules that govern how evidence is collected and used in Australia. The degree sits at AQF level 9, which means it builds on prior study and expects you to think independently about security problems rather than just follow steps.

How the degree is structured

Like most Australian master's degrees, this one runs on a semester basis, with each unit of study carrying a set number of credit points. You need to complete the required credit points to graduate, and the exact unit list and credit-point rules are set out in the official course handbook. The two-year full-time duration usually includes a research or capstone component in the later stages, where you apply what you have learned to a real security or forensics problem. Some students take longer by studying part-time, and international students should check the visa rules around study load before reducing their enrolment.

What you actually learn

You will learn how to examine a compromised system, preserve digital evidence so it stands up to scrutiny, and write reports that lawyers, managers, and technical teams can all use. The coursework covers areas such as operating system and network forensics, malware analysis, security governance, and the Australian legal framework around digital evidence. Assessment is typically a mix of practical labs, written reports, and exams, with the capstone or research project letting you go deeper into an area that interests you. If you have not studied computing before, you may need to take preparatory units, check the entry requirements on the official page.

Who it suits

This degree suits IT professionals who want to move into security or forensics, as well as graduates from computing, engineering, or a related field who want a specialised qualification. It also works for people already in law enforcement, defence, or government who need formal credentials in digital investigation. The University of the Sunshine Coast is based in Queensland, and its security and forensics teaching draws on the same skills that Australian employers in government, banking, healthcare, and consulting need every day. If you are an international student, you can work up to 48 hours per fortnight while your course is in session, and after you finish you may be eligible for the Temporary Graduate visa (subclass 485) post-study work stream, confirm your eligibility with the Department of Home Affairs. English proficiency is required; the published standard for coursework postgraduate programs is usually IELTS Academic 6.0–6.5 overall, with TOEFL iBT, PTE Academic, Cambridge C1 Advanced, and the university's own English programmes accepted as equivalents. Tuition is published on the CRICOS register under course code 109236H. Always check the official University of the Sunshine Coast page for the current unit list, entry requirements, and credit arrangements.

• Cyber security analyst, monitoring networks and systems for threats in banks, government agencies, and large enterprises.
• Digital forensics examiner, recovering and analysing evidence from computers, phones, and networks for law enforcement, consulting firms, or corporate investigations.
• Incident response specialist, leading the technical response when an organisation is breached.
• Security consultant, advising clients on risk, compliance, and security architecture across industries such as finance, healthcare, and defence.
• IT security officer, managing access, policies, and security controls inside an organisation.
• Penetration tester, testing systems for weaknesses before attackers find them, often in specialist security firms.

Australian employers in these roles include federal and state government departments, banks, insurance companies, hospitals, universities, and the major consulting firms. The skills also transfer to any organisation that holds personal or financial data, which is most of them.