Cyber Security Analyst

Tesserent; Sydney; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

ThalesFlex – Hybrid work environment

Fitness Passport – Gym access AUS

Employee discounts

Paid Parental Leave

Novated Lease options

Job summary

Thales Australia is seeking a Cyber Security Analyst to protect systems, networks, data and users. You’ll operate in the SOC, monitor alerts, investigate incidents, and contribute to threat hunting and incident response across enterprise, cloud and identity environments.

You will work with internal IT teams and stakeholders to strengthen detection capabilities and security posture, leveraging SIEM/EDR/XDR tools and governance platforms.

Qualifications

• Experience in a SOC or similar cyber security environment.
• Hands-on with Microsoft Sentinel for monitoring, investigations, hunting.
• Strong knowledge of Defender technologies (Endpoint/Identity/Cloud/O365).
• Experience with Purview for data security or compliance investigations.
• Understanding MITRE ATT&CK and threat detection methodologies.
• Experience with SIEM/log analytics across endpoint, identity, network, cloud, email.
• Experience investigating endpoint security incidents with EDR/XDR.
• IAM concepts including privileged access and lateral movement.
• Able to work in a geographically dispersed SOC.
• Australian citizenship with ability to obtain Defence clearance.

Responsibilities

• Monitor, triage, and investigate security alerts across enterprise, cloud, identity, endpoint, and data environments.
• Identify, analyse, and respond to cyber security incidents in line with policies.
• Threat hunting and investigative activities to identify anomalous or malicious behaviour.
• Support containment, remediation, and recovery with IT and business stakeholders.
• Operate and support SOC tooling including SIEM, EDR/XDR, monitoring and incident response technologies.
• Develop and optimise automated investigation and response workflows.
• Investigate identity-related security events including account compromise and privilege misuse.

Skills

SOC operations

Threat hunting

Incident response

Analytical thinking

Tools

Microsoft Sentinel

Defender for Endpoint

Defender for Identity

Defender for Cloud

Defender for Office 365

Purview

SIEM

EDR/XDR

Job description

Cyber Security Analyst TESSERENT•Rydalmere, NSW, AU

JOB DESCRIPTION

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.

From manufacturing and engineering to cybersecurity and space, we’re driving progress in some of the world’s most important industries – and working together to build a future we can all trust.

In addition to interesting, engaging opportunities that impact at scale, and ongoing personal and professional development opportunities, Thales can offer you:

ThalesFlex – Hybrid work environment

Fitness Passport Discount – Access to a network of Gyms across AUS as cheap as $14.95 P/W

Employee discounts with a number of affiliates (Travel, Car hire, Tech, Medical Insurance)

Modernised Paid Parental Leave

Novated Lease options

The Team

This role is part of our corporate team, a central hub for Thales Australia. It’s where our shared services – think finance, legal, HR, procurement – come together to make sure all teams across Australia have access to the business services they need. Cross-functional collaboration helps us build out Thales’ capabilities – and helps us open up new career opportunities for employees all across the business.

Your Role

As a Cyber Security Analyst, you will play a key role in protecting Thales Australia’s systems, networks, data, and users through proactive monitoring, investigation, and response to cyber security threats. Operating within the Security Operations Centre (SOC), you will contribute to the ongoing enhancement of detection, monitoring, incident response, and cyber resilience capabilities across enterprise, cloud, identity, endpoint, and data environments.

You will work closely with internal IT teams and stakeholders to identify, investigate, and respond to cyber security incidents while continuously improving detection capabilities and operational effectiveness across the security landscape.

Monitor, triage, and investigate security alerts across enterprise, cloud, identity, endpoint, and data environments

Identify, analyse, and respond to cyber security incidents in line with established policies and procedures

Conduct threat hunting and investigative activities to identify anomalous or malicious behaviour

Support containment, remediation, and recovery activities alongside IT and business stakeholders

Operate and support SOC tooling including SIEM, EDR/XDR, monitoring, and incident response technologies

Contribute to the development and optimisation of automated investigation and response workflows

Investigate identity-related security events including account compromise, privilege misuse, and unauthorised access

Support data protection and compliance-driven investigations using security and governance tooling

Improve detection effectiveness through alert tuning, use-case refinement, and onboarding of new telemetry sources

Produce clear and accurate incident documentation and communicate findings to both technical and non-technical stakeholders

Your Experience

Experience working within a Security Operations Centre (SOC) or similar operational cyber security environment

Hands-on experience with Microsoft Sentinel for monitoring, investigations, hunting, alert tuning, and dashboard development

Strong knowledge of Microsoft Defender technologies including Defender for Endpoint, Defender for Identity, Defender for Cloud, and Defender for Office 365

Experience leveraging Microsoft Purview for data security, insider risk, or compliance-related investigations

Strong understanding of threat detection and response methodologies, including MITRE ATT&CK

Experience with SIEM and log analytics platforms across endpoint, identity, network, cloud, and email environments

Experience investigating endpoint-based security incidents using EDR/XDR technologies

Practical understanding of IAM concepts including privileged access, account compromise, and lateral movement scenarios

Strong analytical, investigative, and problem-solving capability with high attention to detail

Ability to work collaboratively within a geographically dispersed SOC environment

A Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.

Additional information with regards to clearances is available from the Australian Government Security Vetting Agency website *******************************/. In some cases, individuals who hold a current clearance from a foreign government may be eligible to have this clearance recognised by the Australian Government and be eligible for this role. The Australian Defence Trade Controls Act (DTCA) is applicable and as such, your nationality may be a factor in determining your suitability for this role.

It’s easy to dismiss the perfect opportunity if you don’t see yourself as the perfect fit. If this role feels right – no matter your background or personal circumstances – please introduce yourself or join our community. We’re committed to supporting a diverse workplace, and that starts here.

We’re proud to be endorsed by WORK180 as an Employer for All Women, but we know there’s always more we can do. We’ll continue to foster industry partnerships, employee resource groups (ERGs) and development opportunities to make Thales a genuinely equitable employer, for everyone.

Read more about our WORK180 endorsement.