Cyber Security Analyst - Azure
Cyber Security Analyst at an Australian critical-infrastructure operator in Melbourne, designing and running security controls across corporate IT, OT and IoT. Day to day: security engineering (EDR, IAM, firewalls, SASE), vulnerability management, compliance with Essential Eight/NIST, and incident response as part of the CSIRT.
- Compensation
- A$150K–A$160K / yr
- Location
- Melbourne VIC
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Minimum 3 years' experience in cyber security-focused roles
- Strong knowledge of cyber security principles, frameworks and best practices
- Hands-on experience with Endpoint Detection & Response (EDR)
- Hands-on experience with Identity & Access Management (IAM)
- Hands-on experience with firewalls and network security
- Hands-on experience with SASE solutions
- Hands-on experience with Data Loss Prevention (DLP)
- Hands-on experience with email security and anti-malware technologies
- Experience with vulnerability management, security assessments and risk remediation
- Exposure to Zero Trust security models, PAM, NDR, UEBA and application security
- Strong understanding of Microsoft Azure and Microsoft 365 security
- Knowledge of Linux environments and enterprise mobility platforms
- Excellent communication, stakeholder engagement and problem-solving skills
- Ability to assess, communicate and manage cyber security risks
- Degree in Cyber Security, IT, Engineering or related discipline, or equivalent practical experience
- Demonstrated experience with frameworks such as Essential Eight, NIST, ISA/IEC 62443 or AESCSF
Nice to have
- Experience working within OT, industrial or critical infrastructure environments
- DevSecOps, automation and orchestration experience
- Exposure to cloud security and infrastructure security engineering
- Experience mentoring or providing technical leadership within security teams
- Industry certifications such as CISSP, CISM, Security+, Azure Security or GIAC
Full description
Salary: 150K to 160K
An established Australian organisation operating critical infrastructure and complex operational environments is seeking a Cyber Security Analyst to join its technology team.
This is a newly created position offering the opportunity to help shape and mature cyber security capabilities across corporate IT, Operational Technology (OT) and Internet of Things (IoT) environments. Working closely with the Enterprise Infrastructure Manager, you will play a key role in strengthening security controls, managing risk, improving resilience and supporting critical business operations.
About the Role
As the Cyber Security Analyst, you will be responsible for the design, implementation and ongoing support of cyber security controls across a diverse technology landscape.
You will work across security engineering, vulnerability management, compliance, incident response and continuous improvement initiatives, helping to build a robust and scalable cyber security capability.
Key ResponsibilitiesSecurity Engineering & Operations
- Design, implement and maintain cyber security controls across IT, OT and IoT environments.
- Deploy, configure and support security technologies including EDR, IAM, firewalls, SASE, encryption and endpoint security solutions.
- Integrate security controls into infrastructure, cloud and application environments.
- Support DevSecOps initiatives and embed security into development and deployment processes.
- Leverage automation and orchestration to improve security operations and compliance.
Risk, Compliance & Governance
- Conduct cyber security risk assessments, vulnerability management activities and security reviews.
- Support compliance with recognised frameworks including Essential Eight, NIST, ISA/IEC 62443 and AESCSF.
- Assist with the development and implementation of cyber security standards, policies and controls.
- Ensure security practices align with organisational risk and regulatory requirements.
Incident Response & Threat Management
- Participate in cyber security incident response activities and investigations.
- Act as a key member of the Cyber Security Incident Response Team (CSIRT).
- Support business continuity, disaster recovery and resilience initiatives.
- Incorporate threat intelligence into security operations to proactively identify and mitigate emerging risks.
Continuous Improvement
- Drive improvements in cyber security tooling, processes and operational maturity.
- Enhance monitoring, detection and response capabilities through automation.
- Stay current with emerging threats, technologies and industry best practices.