Cyber Security Analyst
A SOC analyst role monitoring and triaging security alerts from SIEM and other tools across client environments, investigating and containing incidents, tuning detection rules, and building playbooks plus AI/ML-driven automation for an Australian MSP/MSSP and telecom group.
- Compensation
- Not disclosed
- Location
- Canberra, Australian Capital Territory, Australia
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Strong analytical and problem-solving skills
- Excellent communication skills with technical and non-technical stakeholders
- Knowledge of threat actor behaviour, tradecraft and the attack lifecycle
- Broad understanding of networking, infrastructure, and operating systems
- Highly organised, proactive, able to prioritise and multi-task under pressure
- Obtain a police check prior to employment
- Eligible for a minimum baseline security clearance
Nice to have
- Proficiency in designing and implementing automation, analytical models, and working with generative AI or LLMs
- Applied scripting knowledge in a language such as python, bash, PowerShell
Full description
About the client
Our client is a collective of companies, including a licensed telecommunications carrier providing network and data centre services across Australia and Internationally, and a Managed Service Provider (MSP) and Manage Security Service Provider (MSSP) specialising in IT solutions for mid-market corporate clients and government entities.
Our vision is to empower all organisations, regardless of size, with access to fit-for-purpose, secure IT and telecommunications solutions that support the achievement of their own strategic objectives.
Job Summary:
The Cyber Security Analyst is tasked with continuously monitoring and triaging security events and alerts from SIEM and other security tools across diverse client environments. This role requires promptly investigating and responding to security incidents, providing initial analysis and implementing containment actions to ensure rapid resolution. Furthermore, the analyst will maintain and tune existing platforms while contributing to the development of robust detection and response playbooks and will collaborate with both clients and internal teams to deliver expert security analysis and actionable recommendations. The analyst will also iterate on historical processes such as the introduction of new tooling including, but not limited to AI, for use within the security operations centre.
Responsibilities:
- Respond to and triage alerts quickly to reduce Mean Time to Respond (MTTR).
- Monitor customer environments proactively to improve detection speed and client confidence.
- Tune and build alerting rules to minimize false positives and enhance accuracy.
- Create clear documentation and playbooks to accelerate response workflows.
- Engage with customers and manage escalations to improve satisfaction and trust.
- Automate repetitive alert handling to increase efficiency and reduce manual effort.
- Implement AI/ML solutions to lower Mean Time to Detect (MTTD) and MTTR.
- Continuously refine detection and automation models to achieve reliable outcomes.
Requirements
Essential
- Strong analytical and problem-solving skills
- Excellent communication skills, with the ability to convey technical concepts to both technical and non-technical stakeholders
- Knowledge of threat actor behaviour, tradecraft and the attack lifecycle
- A broad understanding of principles in networking, infrastructure, and operating systems
- Highly organised, proactive, and able to prioritise and multi-task under pressure.
Desirable
- Proficiency in designing and implementing automation, analytical models, and working with generative AI or large language models