Cyber Detection and Response Analyst, Asia Pacific

Control Risks; Sydney; On-site; AUD 90,000 - 150,000; Full time

Job summary

Control Risks in Asia Pacific seeks a hands-on Cyber Detection and Response Analyst to monitor, investigate, and respond to threats across environments. You will join a global 24/7 team and work on incident response playbooks, threat hunts, and detection tuning with Security Engineering.

Ideal candidates have 3–5 years in cyber defense, cloud exposure, and relevant certifications. This role requires permanent Australia work rights and will involve rotating shifts to cover 24/7 operations.

Qualifications

• 3–5 years in cybersecurity focusing on incident response or SOC.
• Hands-on experience with SIEM/EDR/XDR and log analysis tools.
• Knowledge of MITRE ATT&CK and NIST frameworks.
• Familiarity with threat hunting, malware analysis or forensics.
• Experience with cloud environments (AWS, Azure, or GCP) preferred.
• Strong analytical skills and ability to communicate findings clearly.
• Certifications such as Security+, GCIH, GCIA are a plus.
• Based in Australia with permanent work rights.

Responsibilities

• Monitor, triage, and investigate security alerts across endpoints, network, cloud, and identity systems.
• Support incident response activities including containment and remediation.
• Execute incident response playbooks and improve them.
• Perform threat hunting to identify compromises and gaps in detection coverage.
• Leverage threat intelligence to inform investigations and tuning.
• Collaborate with Security Engineering to tune detection logic.
• Produce incident reports and support root cause analysis and remediation efforts.
• Support on-call rotations as part of a 24/7 detection and response capability.

Skills

Cybersecurity

Incident response

SOC operations

Threat hunting

Education

Security+ (and similar)

GCIH

GCIA

Tools

Splunk

Sentinel

CrowdStrike

Job description

Cyber Detection and Response Analyst, Asia Pacific

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.

This role will be a part of a global 24/7 team and will cover one of two shifts: Sunday-Thursday 08:00-16:00 or Tuesday-Saturday 08:00-16:00.

Responsibilities:

• Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.
• Support incident response activities including analysis, containment, remediation, and documentation.
• Execute established incident response playbooks and contribute to their continuous improvement.
• Perform threat hunting activities to identify potential compromises and gaps in detection coverage.
• Leverage threat intelligence to inform investigations and detection tuning.
• Collaborate with Security Engineering to tune detection logic and improve security controls.
• Produce clear, concise incident reports and support root cause analysis and remediation efforts.
• Support on-call rotations and escalation processes as part of a 24/7 detection and response capability.

Requirements

• 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.
• Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).
• Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.
• Familiarity with threat hunting, malware analysis, or forensic investigation techniques.
• Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.
• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
• Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.
• Candidates will need to be based in Australia and hold permanent work rights.