Cyber Security Analyst

Telstra; Brisbane; On-site; AUD 90,000 - 120,000; Full time

Job summary

Telstra in Brisbane is seeking a Cyber Security Analyst to join our Security Operations Centre. You will monitor, investigate, and respond to security events, drive improvements, and contribute to incident response efforts across the full lifecycle.

You will work with SIEM/SOAR/EDR tools, collaborate with teams and stakeholders, and help elevate security maturity through documentation, automation, and knowledge sharing. A hands-on, delivery-focused mindset is essential.

Qualifications

• Experience in Security Operations Centre, Cyber Defence, Incident Response, or MSS environments.
• Experience investigating security alerts, incidents, phishing campaigns, and threat activity.
• Strong incident response methodologies, threat detection, and security operations knowledge.
• Experience using enterprise security monitoring, SIEM, SOAR, EDR, and threat intel platforms.
• Strong analytical and communication skills with ability to prioritise events.
• Able to work in a team and meet competing priorities.
• Experience producing technical reports and recommendations for stakeholders.
• Familiar with NIST Incident Response and ITIL Service Management principles.
• Experience operating in service-based environments with defined SLAs.

Responsibilities

• Monitor, triage, investigate and respond to cyber security events, alerts and incidents.
• Perform phishing analysis and response activities, including investigation and remediation.
• Support incident response across the full lifecycle from detection to recovery.
• Conduct threat analysis and threat hunting to identify cyber risks.
• Develop detection capabilities through rule tuning and process improvement.
• Contribute to automation, documentation and service maturity.
• Produce operational reports and technical recommendations for stakeholders.
• Collaborate with internal and customer teams to maintain service levels.
• Participate in knowledge sharing and cross-skilling within the SOC team.
• Support evolution of the SOC capability to improve security outcomes.

Skills

SOC Experience

Incident Response

Threat Analysis

Security Operations

Cyber Threats

Tools

SIEM

SOAR

EDR

Threat Intel Platforms

Job description

Employment Type
PermanentClosing Date
28 Oct 2026 11:59pmJob Title
Cyber Security Analyst

Job Summary

The successful candidate will possess practical experience in Security Operations Centre, Incident Response, Cyber Defence, or Managed Security Services environments and be comfortable investigating security events, analysing threats, and responding to incidents across their lifecycle. In addition to operational delivery, the role is expected to contribute to continuous improvement initiatives, operational documentation, knowledge sharing, and service optimisation activities that enhance the maturity, efficiency, and effectiveness of the overall security operations capability.

What you'll do:

• Monitor, triage, investigate and respond to cyber security events, alerts and incidents.
• Perform phishing analysis and response activities, including investigation, remediation and stakeholder communication.
• Support incident response activities across the full incident lifecycle, from detection through to recovery and lessons learned.
• Conduct threat analysis, threat hunting and security monitoring activities to identify and mitigate cyber risks.
• Develop and enhance detection capabilities through rule tuning, process improvement and operational optimisation.
• Contribute to continuous improvement initiatives focused on automation, efficiency, documentation and service maturity.
• Produce operational reports, investigation findings and technical recommendations for stakeholders.
• Collaborate with internal and customer teams to maintain service levels and improve security outcomes.
• Participate in knowledge sharing, mentoring and cross-skilling activities across the wider SOC team.
• Support the ongoing evolution and effectiveness of the Security Operations Centre capability.

About you:

You are technically curious and delivery-focused, and you enjoy working through customer security problems. You are comfortable contributing to both hands-on technical work and stakeholder-facing activities, and you can explain security concepts clearly to technical and non-technical audiences. You take direction well, ask good questions, and are motivated to grow into greater ownership over time.

Required Skills and Experience

• Demonstrated experience working within a Security Operations Centre (SOC), Cyber Defence, Incident Response, or Managed Security Services environment.
• Experience investigating and responding to cyber security alerts, incidents, phishing campaigns, and threat activity.
• Strong understanding of incident response methodologies, threat detection, and cyber security operations.
• Experience using enterprise security monitoring, SIEM, SOAR, EDR, and threat intelligence platforms.
• Strong analytical, investigative, and problem-solving skills, with the ability to assess and prioritise security events.
• Experience preparing technical reports, incident summaries, and recommendations for stakeholders.
• Ability to work effectively within a team environment while managing competing operational priorities.
• Strong written and verbal communication skills, with the ability to engage with both technical and non-technical stakeholders.
• Experience contributing to continuous improvement initiatives, including process optimisation, documentation, automation, and operational uplift.
• Familiarity with cyber security frameworks and best practices, including NIST Incident Response and ITIL Service Management principles.
• Experience operating within service-based environments with defined service levels, governance requirements, and customer expectations.
• Ability to work in a fast-paced operational environment supporting critical business services and cyber security outcomes.

Desirable Qualifications

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• Microsoft SC-200: Security Operations Analyst
• Splunk Core Certified Power User
• Splunk Enterprise Security Certified Administrator
• Splunk SOAR (Phantom) Certified Automation Developer or Administrator
• Microsoft SC-300 or equivalent Identity and Access Management certification
• ITIL Foundation Certification
• Relevant tertiary qualification in Cyber Security, Information Technology, Computer Science, Engineering, or a related discipline