The Company

Our client is a leading Australian cloud solutions provider, offering a wide range of cybersecurity services. They work across a diverse range of industries to strengthen cyber security postures and protect against threats.

The Role

As a Security Operations Analyst, you'll operate across multiple customers within my client's environment, managing escalations and incident response based on your expertise level.

You will be working closely with the Security Operations Team Lead and other Analysts to provide threat and vulnerability analysis, security advisory services, and work with large datasets to optimise detection rules.

Responsibilities Include:

• Adhere to and assist in maintaining CSOC policies, processes, procedures, and runbooks.

• Work in a customer facing security operations centre environment.

• Provide analysis and trends of security log data from a variety of security devices.

• Create and deliver security-related reports and suggestions for the company and their clients.

Key Requirements:

• Experience with SIEM/log platforms (e.g. Microsoft Sentinel, Splunk, IBM QRadar, ELK stack).

• Incident response expertise (NIST or SANS).

• Leading incident bridges, handling complex situations.

• Understanding of evolving threat landscape.

• Identify malicious indicators (phishing, SIEM logs).

• Microsoft SC-200 certified.

Please note: Must be able to obtain or maintain an active AGSVA Baseline Security Clearance.

Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Cody Berry on 02 8289 3123 for a confidential discussion.