Cyber Defense & Incident Response Analyst

Australian Secret Intelligence Service; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Australian Secret Intelligence Service is seeking a Cyber Security Operations Analyst in Canberra. You will monitor, detect, and respond to cyber activity to protect confidentiality, integrity and availability of ASIS ICT systems and data.

The role focuses on log analysis, threat hunting, incident response, and developing detection capabilities, with mentorship to peers and ongoing improvements to security coverage.

Qualifications

• Experience in cyber security operations including monitoring, detection and response.
• Proficiency with SIEM and data analytics tools; knowledge of query languages (SQL, SPL, Python, PowerShell).
• Incident response experience and ability to manage investigations are highly valued.
• Certifications in cyber security will be looked upon favorably.
• Bachelor's degree in Cyber Security/CS/IT is preferred but not essential.
• 3+ years of cyber security operations or analyst experience in enterprise or government environments.

Responsibilities

• Monitor, detect and respond to malicious cyber activity targeting ASIS ICT environment.
• Analyse logs from applications, hosts and network traffic using SIEM and hunt threats.
• Prepare for and manage cyber incident response activities, containing and eradicating threats.
• Develop dashboards, use cases and threat detection capabilities to identify gaps.
• Leverage intelligence and data holdings to provide actionable insights for other teams.
• Mentor and coach team members on cyber security operations best practices.

Skills

Risk management

Incident response

Security analytics

PSPF/ISM knowledge

Communication skills

Autonomy

Education

Bachelor's degree in Cyber Security/Computer Science/Information Technology

Tools

SIEM

Data analytics platforms

SQL

Python

PowerShell

SPL

Job description

Australian Secret Intelligence Service is seeking a Cyber Security Operations Analyst in Canberra. You will monitor, detect, and respond to cyber activity to protect confidentiality, integrity and availability of ASIS ICT systems and data.

The role focuses on log analysis, threat hunting, incident response, and developing detection capabilities, with mentorship to peers and ongoing improvements to security coverage.