Security Operations Analyst
J
JobgetherCybersecurity
Fully remote working arrangement from anywhere in Australia., Monday to Friday, from 8:00 AM to 4:00 PM Perth time (AWST). Candidates based elsewhere in Australia must be able to accommodate these working hours in their local time zone.Full-TimeJunior
SalaryAUD 110,000 to AUD 140,000 annual base salary, plus performance-based bonus and equity opportunities.
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 2 years of professional experience in Security Operations, Incident Response, Managed Detection and Response (MDR), or Digital Forensics.
- Required Skills
- Linux
Requirements
- Have at least 2 years of professional experience in Security Operations, Incident Response, Managed Detection and Response (MDR), or Digital Forensics.
- Have practical knowledge of at least one of Windows, Linux, or macOS, including attack surfaces, malware behaviour, and common threat actor techniques.
- Understand system administration concepts and their exploitation, including Active Directory, PowerShell, Group Policy, and local account management.
- Be familiar with the MITRE ATT&CK framework and adversary tactics such as credential dumping, lateral movement, persistence, and data exfiltration.
- Understand networking fundamentals, including ports, protocols, NAT, public and private IP addressing, and VLANs.
- Have investigative and analytical skills, including analysing system logs, processes, and artifacts to uncover malicious activity.
- Be able to communicate technical findings clearly and translate security issues into practical recommendations.
- Have experience using AI tools for security research and daily analysis, and critically validate their outputs before acting.
- Be willing to work Monday to Friday, 8:00 AM to 4:00 PM Perth time (AWST); candidates elsewhere in Australia must accommodate these hours in their local time zone.
Responsibilities
- Monitor, triage, investigate, and respond to security alerts, identifying threats and coordinating remediation.
- Analyse EDR/SIEM telemetry, system logs, and forensic artifacts to determine incident root causes and scope.
- Perform dynamic malware analysis when required to identify malicious behaviour and indicators of compromise.
- Investigate attacker activity across Windows, Linux, and macOS environments, including credential theft, lateral movement, persistence, and data exfiltration.
- Analyse suspicious activity in Microsoft 365 and Google Workspace and recommend ways to secure compromised accounts and tenants.
- Develop and tune detection capabilities, improve alert quality, and maintain efficient investigation workflows.
- Assist security support teams with escalations and technical questions relating to threats and security operations.
- Collaborate with Product and Engineering to improve security products, detection mechanisms, and human-led, AI-assisted workflows.
- Build technical knowledge through investigations, training, threat research, and responsible use of AI tools.
- Share research and technical expertise through publications, webinars, blogs, and industry events.
View Full Description & ApplyYou'll be redirected to the employer's site
