Senior, hands-on analyst in a customer’s security team. Microsoft systems engineering background with Purview, Intune, Sentinel and Defender. Australian citizenship required. Location – Sydney, Melbourne or Canberra.
Job Type Permanent.
ABOUT THE ROLE
A Cyber Security Analyst embedded in a customer’s ICT security function. You will deliver security operations outcomes and support the customer’s governance, risk and compliance (GRC) work.
You will monitor, detect, analyse and respond to security incidents and vulnerabilities, and give assurance that information assets are protected. You will advise stakeholders on cybersecurity matters and support the management and review of security controls.
This is a senior, hands-on role. You will also guide a junior security team member, with direction set together with the customer’s cybersecurity leadership. Behind you sits our client’s security practice, including its CISO and Security Operations Centre (SOC).
KEY RESPONSIBILITIES
- Monitor, detect, analyse and respond to security events, incidents and vulnerabilities, from containment through to closure
- Administer and tune security platforms, including web and email security, vulnerability scanners, application control and endpoint protection
- Work with SIEM and XDR, DLP, SSE, CASB, EDR and vulnerability management tools to maintain visibility and reduce exposure
- Track vulnerabilities from discovery to remediation, prioritised by risk
- Assess security risks in systems, including threats, vulnerabilities and their impact
- Improve security maturity against the Essential Eight, including gap assessments and the remediation roadmap
- Monitor and report on technical compliance, and develop corrective action plans
- Contribute to security policies, frameworks, standards and procedures
- Develop proactive security reporting that guides management decisions
- Advise technical and non-technical stakeholders, turning risk into clear, practical recommendations
- Build strong working relationships across ICT and business teams, and represent the security function in meetings and forums
- Coach and supervise a junior security team member
- Find ways to improve security services, and share lessons learned from incidents, assessments and projects
- Model ethical, professional behaviour and keep learning
KEY CAPABILITIES
- Strong technical understanding of information security principles, protocols and technologies
- Calm, structured and sound judgement when responding to incidents
- Clear, practical communication of cyber risk to technical and non-technical audiences
- Ability to guide junior team members while working under customer leadership
- Professional, discreet and trusted when embedded with a customer
ESSENTIAL
- Australian citizenship
- Microsoft systems engineering background
- Hands-on experience with Microsoft Purview, Intune, Sentinel and Defender
- General understanding of SOC and SIEM concepts (1 to 2 years’ experience; deep expertise not required)
- Strong technical understanding of information security principles, protocols and technologies
- Broad understanding of firewalls, proxies and network topology management
- Excellent written and verbal communication, able to explain cyber risk clearly to technical and non-technical audiences
DESIRABLE
- Hands-on experience with DLP, SSE, CASB, EDR and vulnerability management platforms
- Experience with Microsoft Entra ID
- Practical Essential Eight experience, including maturity assessments and remediation planning
- Experience with risk assessments, technical compliance monitoring and corrective action planning
- Tertiary qualification in cybersecurity, information technology or a related discipline
- Knowledge of the Australian Government Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF)
- Existing Australian Government security clearance (not essential, as clearance sponsorship is available)
- Certifications such as CompTIA Security+, CySA+, Microsoft SC-200 or AZ-500, CISSP, CISM or GIAC
- Experience guiding or mentoring junior team members
TOOLS USED
- Microsoft security stack: Purview, Intune, Sentinel, Defender (Entra ID desirable)
- SIEM and XDR platforms
- EDR and endpoint protection
- DLP, SSE and CASB
- Vulnerability management and scanning platforms
- Web and email security, application control
GENERAL SKILLS & ATTRIBUTES
- Stays a step ahead: spots the early signal in the logs and acts before it becomes an incident
- Calm under pressure: brings structure, clear communication and sound judgement when an incident lands
- Makes security make sense: explains risk in plain language and why a control matters
- Represents the team well: professional, discreet, trusted, and takes ownership of outcomes
