Cyber Defense & Incident Response Specialist

Cyberthrust Pty Ltd; Melbourne; Presencial; AUD 96 000 - 110 000; Tempo integral

Resumo da oferta

Cyberthrust Pty Ltd in Melbourne is seeking a security analyst to monitor alerts across the Security Stack and provide advanced detection and response services. You will perform incident response, malware analysis, and triage support to Orica staff.

You will work with senior security engineers to fine tune systems, reduce false positives, and stay current with forensic practices. The role requires understanding of threats, TTPs, and vulnerability management across hosts, apps, databases and

Qualificações

• Degree in relevant field preferred, plus at least 4 years of post-qualification related employment
• Experience: Successful completion of relevant degree program is not mandatory where candidate possesses at least 5 years of related employment experience; demonstrates critical thinking and problem solving
• English language fluency.

Responsabilidades

• Monitor alerts across Security Stack and provide advanced detection and response service
• Perform incident response and basic malware analysis to investigate incidents
• Help navigate Orica staff from incident response triage into the incident response process if findings are substantiated
• Work with the senior security engineers and analysts in fine tuning the security systems and remove any false positive alarms
• Maintain current knowledge of tools and best practices in forensic and incident response and develop an understanding of advanced persistent threats, including tools, techniques, and procedures of attackers
• Lead security vulnerability management program recommending best practices/solutions to address vulnerabilities, secure hosts, applications, databases, and network technologies
• Strengthen Security operations monitoring by extracting data from threat intelligence and develop understanding of adversary TTPs
• Monitor security logs and alerts from various sources, including intrusion detection systems, Endpoint Detection and Response (EDR) systems and security information and event management (SIEM) tools
• Investigate and analyse security incidents, identify root cause, and develop appropriate mitigation strategies
• Execute security response actions, including full remote remediation of endpoints
• Perform threat hunting and proactive analysis to identify potential security risks and vulnerabilities
• Implement security frameworks including CIS Benchmarks, ASD essential 8 on Orica systems
• Handle cyber security incidents in conjunction with the existing service providers from detection through to completion including maintaining incident response documentation, post-mortem root cause analysis, writing incidents reports and providing lessons learnt and enhancements required.

Formação académica

Degree in relevant field

Descrição da oferta de emprego

Cyberthrust Pty Ltd in Melbourne is seeking a security analyst to monitor alerts across the Security Stack and provide advanced detection and response services. You will perform incident response, malware analysis, and triage support to Orica staff.

You will work with senior security engineers to fine tune systems, reduce false positives, and stay current with forensic practices. The role requires understanding of threats, TTPs, and vulnerability management across hosts, apps, databases and