Cyber Security Analyst

specialized; City of Melbourne; On-site; AUD 110,000 - 150,000; Full time

Job summary

Specialized is seeking a Cyber Security Analyst to monitor security activity across endpoints, identity, email, network, cloud, and data-protection tooling. You will triage alerts, investigate findings, document conclusions, and coordinate remediation with Global Technology and business teammates to reduce risk.

The role involves leading security projects, improving vulnerability management, and supporting incident response while communicating risk in practical business terms.

Qualifications

• Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations, or related role.
• Working knowledge of core security concepts across endpoint, identity, email, networking, applications, vulnerabilities, and data protection.
• Experience reviewing alerts, logs, findings, or security-tool output and turning results into documented actions.
• Ability to investigate ambiguous issues, connect evidence from multiple sources, and make risk-based escalation decisions.

Responsibilities

• Monitor security alerts and events across endpoint, identity, email, network, cloud, application, and data-protection tooling.
• Triage and investigate suspicious activity, validate findings, gather evidence, document conclusions, and escalate based on risk and impact.
• Partner with Global Technology and business teammates to review findings, explain risk, and track remediation to closure.
• Lead security-related projects and improve security baselines, vulnerability management, and system hardening.
• Review vulnerability, exposure, configuration, penetration-test, and bug-bounty findings; validate severity and remediation status.

Skills

Cybersecurity operations

Incident response

Vulnerability management

IT operations

Risk assessment

Education

Security+ / CySA+ / GSEC

Tools

SIEM

Entra ID

Atlassian platforms

Cloud security tools

AWS / Azure / OCI

Job description

Cyber Security Analyst About the Role

The Cyber Security Analyst helps protect Specialized by monitoring security activity, reviewing findings, supporting incident response, and working directly with teammates to reduce risk. This role turns alerts, vulnerability data, control gaps, and tool output into clear actions, follows issues through resolution, and helps teams use security tooling effectively. The ideal candidate is curious, organized, comfortable investigating technical issues, and able to explain risk in practical business terms.

What You Will Do

• Monitor security alerts and events across endpoint, identity, email, network, cloud, application, and data-protection tooling.
• Triage and investigate suspicious activity, validate findings, gather supporting evidence, document conclusions, and escape issues based on risk and impact.
• Partner with Global Technology and business teammates to review security findings, explain what matters, agree on practical remediation steps, and track work through closure.
• Help lead security-related projects with teams across Global Technology to strengthen proactive security, establish and improve security baselines, advance vulnerability management, and support system-hardening efforts.
• Review vulnerability, exposure, configuration, penetration-test, and bug-bounty findings; help validate severity, ownership, remediation status, and evidence of resolution.
• Support cybersecurity incident response by helping determine scope and impact, documenting timelines and actions, coordinating containment tasks, and contributing to post-incident follow-up.
• Help operate and improve security tools by reviewing coverage, tuning alerts, validating data quality, documenting workflows, and identifying gaps or opportunities for better use.
• Respond to security intake from teammates, including suspicious messages, access concerns, data-protection events, and questions about approved security practices.
• Create and maintain clear runbooks, investigation notes, dashboards, metrics, and recurring reports that show risk, trends, progress, and open actions.
• Contribute to control reviews, audits, access reviews, security awareness activities, and other cybersecurity program priorities as needed.

What Success Looks Like

• The analyst acts as a cybersecurity first responder, owns initial response through triage, containment coordination, escalation, documentation, and follow-through to closure.
• Teammates understand the risk, expected action, and priority without unnecessary technical complexity.
• Remediation and proactive security projects are actively driven through validation and closure.
• Security tools provide useful coverage and actionable output, with noise and operational gaps improved over time.
• Leadership has reliable visibility into material risks, recurring trends, blockers, and risk-reduction progress.

What You Need to Win

• Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations, or a related role.
• Working knowledge of core security concepts across endpoint, identity, email, networking, applications, vulnerabilities, and data protection.
• Knowledge of cloud computing environments, including AWS, Microsoft Azure, and OCI.
• Experience reviewing alerts, logs, findings, or security-tool output and turning the results into documented actions.
• Ability to investigate ambiguous issues, connect evidence from multiple sources, and make sound risk-based decisions about escalation and next steps.
• Ability to help lead cross-functional security projects, coordinate owners and dependencies, and drive work through completion.
• Strong organizational, follow-through, written, and verbal communication skills.
• A practical, service-oriented mindset and willingness to collaborate with teammates to solve problems rather than simply report them.

Preferred Qualifications / Experience

• Experience with security monitoring, endpoint detection and response, SIEM, email security, cloud security, vulnerability management, data protection, or Atlassian platforms.
• Experience supporting incident investigations, threat hunting, vulnerability validation, system hardening, or access reviews.
• Familiarity with Entra ID, SaaS security, common enterprise operating systems, and network technologies.
• Experience creating dashboards, reports, playbooks, or simple automations that improve day-to-day security operations.
• Relevant certifications such as Security+, CySA+, GSEC, or equivalent practical experience.
• Interest in using AI and automation responsibly to improve investigation quality and reduce repetitive work.

How We Work

Cybersecurity at Specialized operates through shared accountability. The Cybersecurity team provides monitoring, investigation, standards, guidance, and risk visibility, while technology and business owners remain responsible for their systems, data, remediation decisions, and accepted risk. This role succeeds by building trust, maki