Cyber Security Analyst

Specialized Australia Pty Limited; City of Melbourne; Hybrid; AUD 110,000 - 150,000; Full time

Job summary

Specialized is seeking a Cyber Security Analyst in Melbourne to monitor and respond to security events, investigate incidents, and drive risk reduction across endpoints, identities, and cloud environments. You will collaborate with Global Technology to define remediation steps, track outcomes, and strengthen security baselines.

The role emphasizes practical risk language and cross‑functional coordination. Ideal candidates will have 5+ years in cybersecurity operations, a solid grasp of SIEM,

Qualifications

• Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations, or a related role.
• Working knowledge of core security concepts across endpoint, identity, email, networking, applications, vulnerabilities, and data protection.
• Knowledge of cloud computing environments, including AWS, Microsoft Azure, and OCI.
• Experience reviewing alerts, logs, findings, or security‑tool output and turning the results into documented actions.
• Ability to investigate ambiguous issues, connect evidence from multiple sources, and make sound risk‑based decisions about escalation and next steps.

Responsibilities

• Monitor security alerts and events across endpoint, identity, email, network, cloud, application, and data‑protection tooling.
• Triage and investigate suspicious activity, validate findings, gather supporting evidence, document conclusions, and elevate issues based on risk and impact.
• Partner with Global Technology and business teammates to review security findings, explain what matters, agree on practical remediation steps, and track work through closure.
• Help lead security‑related projects with teams across Global Technology to strengthen proactive security, establish and improve security baselines, advance vulnerability management, and support system‑hardening efforts.
• Review vulnerability, exposure, configuration, penetration‑test, and bug‑bounty findings; help validate severity, ownership, remediation status, and evidence of resolution.
• Support cybersecurity incident response by helping determine scope and impact, documenting timelines and actions, coordinating containment tasks, and contributing to post‑incident follow‑up.
• Help operate and improve security tools by reviewing coverage, tuning alerts, validating data quality, documenting workflows, and identifying gaps or opportunities for better use.
• Respond to security intake from teammates, including suspicious messages, access concerns, data‑protection events, and questions about approved security practices.
• Create and maintain clear runbooks, investigation notes, dashboards, metrics, and recurring reports that show risk, trends, progress, and open actions.
• Contribute to control reviews, audits, access reviews, security awareness activities, and other cybersecurity program priorities as needed.

Skills

Cybersecurity operations

Incident response

Vulnerability management

Security monitoring

Threat hunting

Communication

Tools

SIEM

Azure

AWS

OCI

Entra ID

Atlassian platforms

Job description

About the Role

The Cyber Security Analyst helps protect Specialized by monitoring security activity, reviewing findings, supporting incident response, and working directly with teammates to reduce risk. This role turns alerts, vulnerability data, control gaps, and tool output into clear actions, follows issues through resolution, and helps teams use security tooling effectively. The ideal candidate is curious, organized, comfortable investigating technical issues, and able to explain risk in practical business terms.

What You Will Do

• Monitor security alerts and events across endpoint, identity, email, network, cloud, application, and data‑protection tooling.


• Triage and investigate suspicious activity, validate findings, gather supporting evidence, document conclusions, and elevate issues based on risk and impact.


• Partner with Global Technology and business teammates to review security findings, explain what matters, agree on practical remediation steps, and track work through closure.


• Help lead security‑related projects with teams across Global Technology to strengthen proactive security, establish and improve security baselines, advance vulnerability management, and support system‑hardening efforts.


• Review vulnerability, exposure, configuration, penetration‑test, and bug‑bounty findings; help validate severity, ownership, remediation status, and evidence of resolution.


• Support cybersecurity incident response by helping determine scope and impact, documenting timelines and actions, coordinating containment tasks, and contributing to post‑incident follow‑up.


• Help operate and improve security tools by reviewing coverage, tuning alerts, validating data quality, documenting workflows, and identifying gaps or opportunities for better use.


• Respond to security intake from teammates, including suspicious messages, access concerns, data‑protection events, and questions about approved security practices.


• Create and maintain clear runbooks, investigation notes, dashboards, metrics, and recurring reports that show risk, trends, progress, and open actions.


• Contribute to control reviews, audits, access reviews, security awareness activities, and other cybersecurity program priorities as needed.

What Success Looks Like

The analyst acts as a cybersecurity first responder, owns initial response through triage, containment coordination, escalation, documentation, and follow‑through to closure. Teammates understand the risk, expected action, and priority without unnecessary technical complexity. Remediation and proactive security projects are actively driven through validation and closure. Security tools provide useful coverage and actionable output, with noise and operational gaps improved over time. Leadership has reliable visibility into material risks, recurring trends, blockers, and risk‑reduction progress.

What You Need to Win

• Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations, or a related role.


• Working knowledge of core security concepts across endpoint, identity, email, networking, applications, vulnerabilities, and data protection.


• Knowledge of cloud computing environments, including AWS, Microsoft Azure, and OCI.


• Experience reviewing alerts, logs, findings, or security‑tool output and turning the results into documented actions.


• Ability to investigate ambiguous issues, connect evidence from multiple sources, and make sound risk‑based decisions about escalation and next steps.


• Ability to help lead cross‑functional security projects, coordinate owners and dependencies, and drive work through completion.


• Strong organizational, follow‑through, written, and verbal communication skills.


• A practical, service‑oriented mindset and willingness to collaborate with teammates to solve problems rather than simply report them.

Preferred Qualifications / Experience

• Experience with security monitoring, endpoint detection and response, SIEM, email security, cloud security, vulnerability management, data protection, or Atlassian platforms.


• Experience supporting incident investigations, threat hunting, vulnerability validation, system hardening, or access reviews.


• Familiarity with Entra ID, SaaS security, common enterprise operating systems, and network technologies.


• Experience creating dashboards, reports, playbooks, or simple automations that improve day‑to‑day security operations.


• Relevant certifications such as Security+, CySA+, GSEC, or equivalent practical experience.


• Interest in using AI and automation responsibly to improve investigation quality and reduce repetitive work.

How We Work

Cybersecurity at Specialized operates through shared accountability. The Cybersecurity team provides monitoring, investigation, standards, guidance, and risk visibility, while technology and business owners remain responsible for their systems, data, remediation decisions, and accepted risk. This role succeeds by building trust, making findings understandable, and helping teammates move from issue identification to measurable risk reduction.

Role Character

This is an analyst role, not a dedicated security engineering position. The emphasis is on monitoring, investigation, validation, project coordination, communication, and operational follow‑through. The role helps lead proactive security and hardening efforts, recommends tool or control improvements, and supports implementation, while its primary value remains turning security signals into clearer decisions and completed actions.

We want to increase representation of all races, genders, and body types in the cycling industry and are committed to building a diverse and inclusive workforce where all people thrive.

We are always looking for creative, innovative, and passionate people who are eager to contribute to our mission of pedaling the planet forward.

Company Background

1974 We are riders—that fact has guided our every decision since 1974. When quality tires weren't around, we strove to make the best. When people wanted to ride cruisers in the dirt, we made the first production mountain bike. When roadies wanted to go faster, we doubled‑down on carbon and built our own wind tunnel. And when we saw kids struggling to focus in school, we began supporting Outride to help promote better health through cycling. Specialized. Made for riders, by riders.