Cyber Security Analyst

Amwins; Sydney; On-site; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Mental health support

Life & AD&D Insurance

Health Savings Account

Health Care FSA

Parental Leave

401(k) with company match

Paid Time Off

Identity Theft Protection

Job summary

Amwins Australasia Division seeks a Cyber Security Analyst to join the Cybersecurity department. The role is the first line of defense, monitoring with Microsoft Defender XDR, analyzing logs, and addressing security service requests from users.

You will collaborate with internal teams to improve security processes, document operations, and stay current on threats, tools, and AI-assisted detection to enhance response effectiveness.

Qualifications

• 2–3 years of minimum experience in security operations, incident response, or related IT role.
• Hands-on with Defender XDR and Sentinel; proficient in KQL and advanced hunting.
• Understanding of incident response lifecycle, MITRE ATT&CK, SIEM/XDR concepts.

Responsibilities

• Monitor, triage, and respond to security events and alerts using Defender XDR and related tools.
• Conduct in-depth analysis of logs and network traffic to identify threats using KQL.
• Apply AI-assisted capabilities to accelerate triage, investigation, and enrichment.
• Coordinate containment and recovery during incidents with team and partners.
• Respond to and resolve security-related user requests.

Skills

Defender XDR

Microsoft Sentinel

KQL

MITRE ATT&CK

SIEM/XDR concepts

Windows Active Directory/Entra ID

Networking fundamentals

Cloud security

PowerShell

Python

Tools

Microsoft Defender XDR

Microsoft Sentinel

Job description

Cyber Security Analyst

The Cybersecurity Analyst is a member of the Cybersecurity department, supporting the newly formed Amwins Australasia Division. The analyst serves as the first line of defense in security event monitoring, working to detect and mitigate threats to the organization. Using Microsoft Defender XDR and other security tools, the analyst monitors for security events, responds to security related service requests from users, and conducts in depth analysis of logs and security alerts to identify potential threats.

The Analyst works closely with internal teams to ensure effective containment and eradication, helps build repeatable security processes within the Security team, and assists with projects and tasks as directed. Most importantly, they build relationships to increase the security mindset of the organization through collaboration.

This role is built for someone with a natural curiosity and a genuine passion for cybersecurity: a person who keeps learning as threats, tools, and techniques evolve, including how AI can make detection and response faster and more effective.

Responsibilities

• Monitor, triage, and respond to security events and alerts using Microsoft Defender XDR and related security tools, serving as the first line of defense against security threats.
• Conduct in-depth analysis of logs, network traffic, and security alerts to identify potential threats, using Kusto Query Language (KQL) for investigation and proactive threat hunting.
• Apply AI-assisted capabilities to accelerate alert triage, investigation, enrichment, and response, validating AI-generated output.
• Facilitate security event response and containment during a Security Incident and coordinate response and recovery efforts with other members of the team and internal partners to ensure effective containment and eradication.
• Respond to and resolve security related service requests from users.
• Escalate identified risk to the Technology Risk and Compliance program as well as Senior Management.
• Make recommendations to enhance the effectiveness of controls.
• Create and update process documentation as needed and assist with the creation of security processes to establish repeatable practices within the Security team.
• Create reporting, as directed, to ensure effective security operations.
• Stay current on emerging threats, adversary techniques, and security tooling, and share what is learned with the team to continuously improve detection and response.
• Maintain well documented cases for case/shift handoff to support a follow-the-sun operating model.

Qualifications, Skills, and Experience

• Experience: 2–3 years of minimum experience in a security operations, incident response, or related IT role.
• Technical Skills: Hands-on experience with Microsoft Defender XDR (Endpoint, Identity, Cloud Apps) and Microsoft Sentinel; working proficiency in KQL and advanced hunting; understanding of the incident response lifecycle, MITRE ATT&CK, SIEM and XDR concepts, Windows and Active Directory/Entra ID, networking fundamentals, and cloud security. Scripting or automation experience (PowerShell, Python) is a plus.
• Bias for Action: Moves quickly from alert to action, making sound decisions with the judgment to know when to elevate
• AI in Security Operations: Working knowledge of applying generative AI and AI-assisted tools to security operations, such as alert triage, query development, incident summarization, and enrichment, with the judgment to validate outputs.
• Curiosity and Passion: A natural curiosity and genuine passion for cybersecurity, demonstrated through self-driven learning such as maintaining a home lab and participating in CTF events with a desire to understand how and why attacks work.
• Communication and Collaboration: Clear written and verbal communication, including disciplined case documentation and shift handoff. The ability to document processes and elevate risk effectively. Comfort collaborating across time zones in a follow the sun team.

The Amwins Advantage: Benefits & Perks Available to Full-Time US Based Employees

• Medical, Dental, Vision available your first day of employment

  • Choice of medical plans through Blue Cross Blue Shield; Kaiser available for CA employees

• Mental health support including:

  • Virtual therapy
  • Digital coaching
  • 24/7 EAP counseling

• Company-paid Basic Life & AD&D Insurance, Short-Term Disability, and Employee Assistance Program

• Health Savings Account with company contributions

• Health Care FSA, Dependent Care FSA, and CommuterBenefits

• Parental Leave and Adoption Assistance

• Voluntary coverage options:

  • Life Insurance
  • Critical Illness
  • Accident
  • Identity Theft Protection

• Retiree medicalbenefitsavailable for Medicare-eligible retirees

• 401(k) with company match

• Generous Paid Time Off and Company Holiday Schedule

• Collaborative, continuing education focused work environment

• Career advancement opportunities