Senior Security Analyst in Sydney
- Sydney, NSW
- Permanent
- Full-time
- Analyze, review and respond to security alerts, events, including triaging and advising on mitigation activities
- Investigate security incidents and breaches to identify root causes and recommend improvements
- Engage in testing and monitoring the performance of systems and services, making sure that security requirements are met
- Maintain strong working relationships, work collaboratively, and share ideas, knowledge and experience with team members as required
- Assist in continuously updating the company's security incident, data breach response and disaster recovery plans
- Undertake threat detection practices.
- Undertake security hardening support practices with teams.
- Vulnerability management to analyse findings from vulnerability reports, assist with risk assessments on the vulnerabilities and coordinate remediation and patching activities with system owners.
- Taking on a wide variety of security operations tasks on an as needed basis.
- Minimum 5 years' experience in a similar Cyber Security role
- Working knowledge of security frameworks, policies and standards such as ISO27001, PCI DSS, Essential Eight, NIST CSF, and MITRE ATT&CK and applying them into operational context
- Experience with cloud-based services and technologies
- Ability to detect and defend against commonly-used attack tactics, techniques and procedures (TTPs) against known attack surfaces such as identity, email, endpoint, network and cloud
- Passionate about growth and learning. You are continuously finding ways to grow your skills through self-study, technical projects, CTFs and engagement in technical forums.
- A background prior to security in IT support/infrastructure would be advantageous (e.g. servers, networking protocols, security controls, O365/Azure)
- First-hand experience with SIEM platforms, enterprise intrusion prevention systems, endpoint detection and response tools, and other security products
- Able to communicate effectively in verbal and written format with technical and non-technical audiences
- Ability to effectively plan, schedule and adapt to changing priorities, tasks, and requirements to meet deadlines
- Ability to work under pressure and at times with limited supervision
- Relevant certification such as CISSP, CCNA, CompTIA Security+ will be highly regarded