Cyber Security Analyst

cleared; Canberra; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work culture

Training opportunities

Job summary

Cleared seeks an experienced security professional to join our Operations, Hunt and Response team in a leadership capacity. You will lead a shift of analysts delivering security operations for Government to private sector clients, focusing on detection development and incident response.

Ideal candidates have 2+ years in IT security with SIEM experience and a collaborative mindset. Hybrid work options and ongoing training are provided to keep you at the top of your field.

Qualifications

• 2+ years in an IT security role with SIEM experience.
• Clearance baseline; potential on-request support for no clearance.
• Proven problem solving and mentoring capabilities.

Responsibilities

• Monitor and respond to security alerts within a SIEM platform.
• Document case notes to determine alert validity.
• Serve as escalation point for analysts.
• Review case notes and alert determinations.
• Help develop new detections and refine existing ones.
• Contribute to SIEM process and workflow improvements.
• Conduct routine and ad-hoc threat hunting.
• Assist with Incident Response and Digital Forensics as needed.

Skills

IT security

SIEM

Threat hunting

Incident response

Digital forensics

Leadership

Tools

Elastic

Splunk

Microsoft Sentinel

Job description

Are you looking for a new role where you can be part of a team responding to active security alerts, staying up to date on emerging threats, working in a collaborative environment to protect customers networks, and use cutting edge tools and methods to do so? Are you currently in an IT security role and are looking for your leg-up into a senior role with leadership and mentoring opportunities? This role might be for you.

We're looking for people who think outside the box and are keen to join our Operations, Hunt and Response team, to lead a shift of analysts providing security operations services to all manner of customers, from Government to small, medium and large private industry.

What you’ll be doing

Key areas of the role are:

• Assisting with monitoring & responding to security alerts within a SIEM platform.
• Documenting case notes to make determinations on the validity of security alerts.
• Be a point of escalation for other analysts.
• Reviewing case notes and alert determinations.
• Contributing to the development of new detections, and the refinement of existing security detections.
• Contributing to the continued improvements of SIEM processes and workflows.
• Performing routine and ad-hoc threat hunting activities.
• Assist with Incident Response and Digital Forensics as required.

What’re we looking for?

Required

• Outside of the box attitude to problem solving and securing our customer environments.
• 2+ years of experience in an IT security role, preferably with some SIEM experience (Elastic/Splunk/Sentinel).
• Baseline clearance, but we may be able to support no clearance requirement depending on the applicant.

Nice to have

• Hack the Box, Pentesterlab, TryHackMe or BlueTeamLabs (or equivalent) experience.
• Proven genuine interest in Cyber Security through examples such as personal projects, up to date industry knowledge, home labs, etc.
• DFIR experience.
• Management or Shift Lead experience.
• Negative Vetting 1 clearance or above.

What do we offer?

• Working from home? You bet. We don't mind where you work, we have a hybrid work culture that supports the way you want to work.
• Fair pay? No doubt. We’re sure you’re worth it.
• Training? Obviously. We want our people to be the best, and to keep it that way we need to invest, simple.

A bit about us

Cleared has been providing bespoke cyber advice and services since 2019, helping customers mature and grow their cyber capability and respond and handle threats. We provide ethical and cost-effective solutions to our customers’ problems and find our unique business culture is important to our success.