Cyber Security Analyst

E2E Project Excellence; Melbourne; On-site; AUD 90,000 - 130,000; Full time

Job summary

E2E Project Excellence is seeking a Cyber Security Analyst to design, implement and support security controls across IT, OT and IoT environments in an established Australian organisation.

You will work on risk assessments, incident response, and continuous improvement initiatives, strengthening security across corporate IT and critical operational technologies. Strong collaboration with stakeholders is essential for resilience and compliance.

Qualifications

• Degree in Cyber Security, IT, Engineering or related field.
• Certifications such as CISSP, CISM, Security+, Azure Security highly regarded.
• Minimum 3 years in cyber security-focused roles.
• Experience with frameworks such as Essential Eight, NIST, ISA/IEC 62443 or AESCSF.

Responsibilities

• Design, implement and maintain cyber security controls across IT, OT and IoT environments.
• Deploy, configure and support security technologies including EDR, IAM, firewalls, SASE, encryption.
• Integrate security controls into infrastructure, cloud and application environments.
• Support DevSecOps and embed security into development and deployment processes.
• Leverage automation to improve security operations and compliance.
• Conduct cyber security risk assessments and vulnerability management activities.
• Assist with compliance with frameworks including Essential Eight, NIST, ISA/IEC 62443 and AESCSF.
• Participate in cyber security incident response activities and investigations.
• Support business continuity and disaster recovery and resilience initiatives.
• Provide security guidance and mentoring to stakeholders.

Skills

Cyber security concepts

Risk assessment

Security frameworks

Incident response

Security engineering

DevSecOps

Threat intelligence

Azure security

OT/IoT security

Communication skills

Education

Degree in Cyber Security or related

Certifications (CISSP, CISM, Security+, Azure Security)

Tools

EDR

IAM

Firewalls

SASE

DLP

Email security

Job description

An established Australian organisation operating critical infrastructure and complex operational environments is seeking a Cyber Security Analyst to join its technology team.

This is a newly created position offering the opportunity to help shape and mature cyber security capabilities across corporate IT, Operational Technology (OT) and Internet of Things (IoT) environments. Working closely with the Enterprise Infrastructure Manager, you will play a key role in strengthening security controls, managing risk, improving resilience and supporting critical business operations.

About the Role

As the Cyber Security Analyst, you will be responsible for the design, implementation and ongoing support of cyber security controls across a diverse technology landscape.

You will work across security engineering, vulnerability management, compliance, incident response and continuous improvement initiatives, helping to build a robust and scalable cyber security capability.

Key Responsibilities

Security Engineering & Operations

• Design, implement and maintain cyber security controls across IT, OT and IoT environments.
• Deploy, configure and support security technologies including EDR, IAM, firewalls, SASE, encryption and endpoint security solutions.
• Integrate security controls into infrastructure, cloud and application environments.
• Support DevSecOps initiatives and embed security into development and deployment processes.
• Leverage automation and orchestration to improve security operations and compliance.

Risk, Compliance & Governance

• Conduct cyber security risk assessments, vulnerability management activities and security reviews.
• Support compliance with recognised frameworks including Essential Eight, NIST, ISA/IEC 62443 and AESCSF.
• Assist with the development and implementation of cyber security standards, policies and controls.
• Ensure security practices align with organisational risk and regulatory requirements.

Incident Response & Threat Management

• Participate in cyber security incident response activities and investigations.
• Act as a key member of the Cyber Security Incident Response Team (CSIRT).
• Support business continuity, disaster recovery and resilience initiatives.
• Incorporate threat intelligence into security operations to proactively identify and mitigate emerging risks.

Continuous Improvement

• Drive improvements in cyber security tooling, processes and operational maturity.
• Enhance monitoring, detection and response capabilities through automation.
• Stay current with emerging threats, technologies and industry best practices.
• Provide security guidance and mentoring to technical and business stakeholders.

Skills & Experience

Essential

• Strong knowledge of cyber security principles, frameworks and best practices.
• Hands-on experience with key security technologies including:
  • Endpoint Detection & Response (EDR)
  • Identity & Access Management (IAM)
  • Firewalls and network security
  • SASE solutions
  • Data Loss Prevention (DLP)
  • Email security and anti-malware technologies
• Experience with vulnerability management, security assessments and risk remediation.
• Exposure to Zero Trust security models, PAM, NDR, UEBA and application security.
• Strong understanding of Microsoft Azure and Microsoft 365 security.
• Knowledge of Linux environments and enterprise mobility platforms.
• Excellent communication, stakeholder engagement and problem-solving skills.
• Ability to assess, communicate and manage cyber security risks.

Highly Regarded

• Experience working within Operational Technology (OT), industrial or critical infrastructure environments.
• DevSecOps, automation and orchestration experience.
• Exposure to cloud security and infrastructure security engineering.
• Experience mentoring or providing technical leadership within security teams.

Qualifications

• Degree in Cyber Security, Information Technology, Engineering or a related discipline, or equivalent practical experience.
• Industry certifications such as CISSP, CISM, Security+, Azure Security, GIAC or equivalent will be highly regarded.
• Minimum 3 years' experience in cyber security-focused roles.
• Demonstrated experience working with frameworks such as Essential Eight, NIST, ISA/IEC 62443 or AESCSF.