Senior Cyber Security Operations Analyst

Our client is a community focused federal government agency. Due to growth, they are seeking a Senior Cyber Security Operations Analyst to join their Cyber Security and Resilience Branch. The Senior Cyber Security Operations Analyst will undertake technical cyber security activities under the leadership of the Assistant Director of Cyber Security Operations.

The Cyber Security Operations Analyst must possess and demonstrate technical competency in areas of cloud security (Azure/AWS), endpoint and network security, threat intelligence and hunting, data loss prevention, vulnerability management, and incident response. You will be required to support and contribute to the protection of the clients’ systems, users, and data, to support objectives to “build a world-leading product.
As part of the Cyber Operations team, the role will help ensure that the client has the capability to build and protect cyber-resilient information technology platforms and support strategic objectives.
The role will involve the key responsibilities:

• Lead proactive monitoring, investigation, and mitigation of security incidents within security tools (including Microsoft Defender 365 stack, Azure Security Centre, InSights, Splunk)
• Analyse security event data and identifying suspicious/malicious activity from networks and systems.
• Lead incident response activities including initial and detailed investigation, computer forensics, chain of custody implications.
• Identify critical data sources required by cyber for ingestion and normalization into the SIEM.
• Collaborate with Security Operations and IT engineers to implement security controls.
• Supervise, mentor, and develop junior staff, and identify areas of people, process, and defensive tool improvement.
• Produce and disseminate incident response reports, activity reports, and intelligence and threat briefs.

To apply for this excellent opportunity, you will need the following:

• Demonstrated familiarity with log aggregation and Security Incident and Event Management (SIEM) systems.
• Knowledge of the Information Security Manual (ISM) and cyber security concepts.
• Demonstrated experience implementing and using Incident Response Frameworks (NIST SP 800-61 Incident Handling Guide, Mitre Frameworks)
• Formal tertiary qualifications or industry certifications in a cyber security related field (e.g. Azure/AWS, Splunk Certified)
• Sound stakeholder relationship skills. Highly developed written and verbal communication skills.
• Worked in a Security/Network Operations Center (or similar).

Please note this role will require working in a Security Operations Center in Geelong with the potential for a requirement to work a rotating roster between 0700 and 1900 AEST.

Security clearance.
Ability to obtain / maintain a NV1 Security clearance is required for this role. Pre-engagement Checks will be undertaken by the client and commencement is subject to the Specified Personnel meeting the standard in relation to the Pre-Engagement Check requirements. The client seeks specified personnel who are Australian citizens.

The client offers a 7.5-hour day capped at 230 working days thus this is a good long-term package. Submit your resume, or for further information please contact bini.james@talentinternational.com or call Bini James on +61 3 9236 7708 – Shortlisted candidates will be contacted.