Cyber Defence Analyst

Medibank Private Limited; Melbourne; Presencial; AUD 110.000 - 150.000; Jornada completa

Descripción de la vacante

Medibank Private Limited is seeking a Cyber Defence Analyst to join the Cyber Defence Team in Melbourne. You will support day-to-day identification, investigation and response to security threats, applying attacker behaviour knowledge and the MITRE ATT&CK framework to detect and respond to potential threats.

You will work with senior analysts, perform threat hunting, incident analysis and participate in threat hunting and control uplift activities, ensuring clear investigation notes and

Formación

• 4+ years in security operations, cyber defence or related role.
• Experience with detection-as-code, threat hunting or 24x7 SOC environment.
• Strong experience in security alert triage and incident investigations.

Responsabilidades

• Monitor, triage and investigate security alerts across endpoint, identity, network and cloud telemetry.
• Perform initial incident analysis to understand scope, severity and potential impact.
• Escalate complex or high-risk activity to senior analysts with clear evidence.
• Apply knowledge of attacker tactics, techniques and procedures in analysis.
• Use MITRE ATT&CK framework to categorize activity and support investigations.
• Maintain timelines and findings of investigations.
• Collaborate with incident response, IT and security engineering teams.

Conocimientos

Security operations

Threat hunting

MITRE ATT&CK

SIEM/EDR

SOC experience

Detection as code

Analytical skills

Incident investigations

Educación

Security+ / GCIH certification

Herramientas

Microsoft Security Suite

SIEM platforms

EDR platforms

Cloud telemetry

Descripción del empleo

Select how often (in days) to receive an alert:

DOCKLANDS, VIC, AU, 3008 VIC, AU NSW, AU QLD, AU

At Medibank Group, our brands, Medibank, ahm and Amplar Health, are united by a shared purpose: creating the best health and wellbeing for Australia. We're building a workplace where people can thrive, grow and make a meaningful impact, while helping shape a healthier future for our customers, patients and communities.

We’re looking for a Cyber Defence Analyst to join our Cyber Defence Team and support the day-to-day identification, investigation and response to security threats.

In this role, you’ll work across security alert analysis, incident investigation and threat hunting, applying your understanding of attacker behaviour and the MITRE ATT&CK framework to help identify and respond to potential threats.

Working alongside senior analysts and specialists, you’ll contribute to the effectiveness and reliability of the cyber defence function while continuing to develop your capability across security operations.

The Responsibilities:

Monitor, triage and investigate security alerts across endpoint, identity, network and cloud telemetry.

Perform initial incident analysis to understand scope, severity and potential impact.

Escalate complex or high-risk activity to senior analysts or incident responders with clear supporting evidence.

Apply your knowledge of attacker tactics, techniques and procedures when analysing alerts and incidents.

Use the MITRE ATT&CK framework to categorise activity, support investigations and understand attack progression.

Support the maintenance, improvement and tuning of existing detections.

Participate in threat hunting activities and supporting control uplift activities.

Maintain clear investigation notes, timelines and findings.

Collaborate with incident response, IT and security engineering teams as required.

About you:

A minimum of 4 years’ experience in security operations, cyber defence or a related role.

Experience with detection-as-code, threat hunting or working within a 24×7 SOC or enterprise security operations environment.

Strong experience performing security alert triage and incident investigations.

Experience in one or more of the following:

Microsoft Security Suite

Email,Endpoint, identity, network or cloud telemetry.

Working knowledge of common attack methodologies and adversary behaviour.

Familiarity with the MITRE ATT&CK framework and its use within security operations.

Experience using one or more SIEM or EDR platforms.

Strong analytical skills and attention to detail with ability to work independently on assigned tasks while following established processes.

Entry or intermediate security certifications such as Security+, BTL L1/L2or GCIH are also desirable.

Why work for Medibank Group?

At Medibank Group, we're creating Australia's healthiest workplace by putting the health, wellbeing and success of our people at the centre of everything we do. We know that when people feel supported, connected and empowered to be themselves, they do their best work.

That's why we invest in flexible ways of working, career growth, wellbeing support and meaningful experiences that help our people thrive both professionally and personally.

To learn about what’s in it for you, visit https://careers.medibank.com.au/the-medibank-experience

Be Yourself. Belong Here

We’re committed to a workplace where everyone feels safe, supported, and free to be themselves. By embracing diverse perspectives, we challenge the status quo and uncover better ideas. You can confidently bring your whole self—because your unique voice is what makes us stronger.
We welcome and encourage applications from people of all backgrounds, identities and lived experiences, including Aboriginal and Torres Strait Islander peoples, people from culturally and linguistically diverse backgrounds, LGBTQIA+ communities, people with disability, neurodivergent people, and carers.

Our employee networks create space for connection, advocacy and allyship. We offer flexible ways of working to support inclusion, accessibility and wellbeing.

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work

Copyright @2024 Medibank Private Limited. All rights reserved. ABN 47 080 890 259.