Cyber Security Analyst

Motion Recruitment; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

Motion Recruitment is seeking a security professional in Sydney to join a hands-on cybersecurity team. You will work across monitoring, threat detection and incident response, developing technical skills while strengthening the organisation's security posture.

You will leverage Microsoft Defender XDR, Sentinel and other security platforms, contributing to process improvements and AI-assisted security capabilities to enhance detection and response.

Qualifications

• Experience in a SOC, cyber security, incident response or similar technical role.
• Practical experience with Microsoft Defender XDR (Endpoint, Identity and Cloud Apps).
• Knowledge of MITRE ATT&CK, Windows environments, Entra ID and cloud security.

Responsibilities

• Monitor and investigate security alerts using Defender XDR and other platforms.
• Analyze logs and network activity to identify threats.
• Perform investigations and threat analysis with KQL.
• Assist with incident response: containment and remediation.
• Coordinate incident response and recovery with IT teams.
• Develop security documentation and reports.

Skills

SOC operations

Threat hunting

Incident response

KQL proficiency

Windows/AD/Entra ID knowledge

MITRE ATT&CK

Communication

Tools

Microsoft Defender XDR

Microsoft Sentinel

SIEM/XDR technologies

Job description

This is an opportunity for someone with experience in cyber security or security operations who wants to develop their technical skills in a hands-on environment.

Working across security monitoring, threat detection and incident response, you'll play an important role in identifying potential threats, investigating suspicious activity and helping strengthen the organisation's overall security posture.

You'll work with Microsoft security technologies, including Defender XDR and Sentinel, while contributing to the development of security processes and controls. The team is also embracing AI-assisted security capabilities, making this a great opportunity for someone interested in how emerging technologies can improve threat detection and response.

They're looking for someone naturally curious, proactive and passionate about cyber security, who enjoys investigating how attacks happen and continually building their technical knowledge.

Key Responsibilities

• Monitor and investigate security alerts, events and potential threats using Microsoft Defender XDR and other security platforms.
• Analyse logs, network activity and security data to identify suspicious behaviour and emerging threats.
• Use KQL to conduct investigations, advanced hunting and threat analysis.
• Leverage AI-assisted tools to support alert triage, investigation, incident summarisation and threat enrichment, applying sound judgement to validate results.
• Assist with security incident response, including investigation, containment and remediation activities.
• Work alongside internal technology teams to coordinate incident response and recovery.
• Manage and resolve security-related service requests and elevate risks where appropriate.
• Identify opportunities to improve existing security controls, processes and procedures.
• Develop and maintain security documentation, operational reporting and investigation records.
• Support effective handovers across a follow-the-sun security operations model.
• Keep up to date with evolving cyber threats, attack techniques and security technologies, sharing knowledge and recommendations with the wider team.

Skills & Experience

• Experience in a Security Operations Centre (SOC), cyber security, incident response or a similar technical role.
• Practical experience with Microsoft Defender XDR, including Endpoint, Identity and Cloud Apps.
• Exposure to Microsoft Sentinel and SIEM/XDR technologies.
• Working knowledge of Kusto Query Language (KQL) and advanced threat hunting.
• Understanding of incident response processes and frameworks such as MITRE ATT&CK.
• Knowledge of Windows environments, Active Directory/Entra ID, networking fundamentals and cloud security.
• Exposure to scripting or automation using PowerShell or Python would be advantageous.
• An understanding of how AI and generative AI tools can be applied to security operations, including alert investigation, query development and incident analysis.
• Strong problem-solving skills and the ability to investigate issues, make informed decisions and recognise when escalation is required.
• Excellent communication skills, with the ability to document findings and work collaboratively with technical stakeholders.