Cyber Security Analyst – Incident Response & Risk (Hybrid)

Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is seeking an APS6 Cyber Security Analyst to join the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. You will contribute to day-to-day security operations, assurance activities and capability uplift across Microsoft security platforms and enterprise technologies.

The role requires sound judgement, clear communication and the ability to manage competing priorities

Qualifications

• Experience in cyber security operations, technical assurance, investigations or a related discipline.
• Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
• Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
• Analyse complex information from a variety of sources, identify risks and trends, and exercise sound judgement to support evidence-based decisions and recommendations.
• Manage competing priorities in a dynamic environment, delivering quality outcomes while maintaining attention to detail and appropriate risk management practices.
• Demonstrate a growth mindset, including a willingness to learn, adapt and continuously develop technical and professional capability, while contributing to a culture of learning and improvement.
• Identify opportunities to improve security controls, processes and services, and contribute to the development of more efficient, consistent and sustainable ways of working.
• Contribute to a positive and professional team culture through collaboration, accountability, integrity and a commitment to high-quality outcomes.

Responsibilities

• Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
• Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
• Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
• Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
• Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
• Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
• Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

Skills

Cyber security operations

Technical assurance

Investigations

Stakeholder communication

Risk analysis

Incident response

Tools

Microsoft Defender

Microsoft Entra

Microsoft Sentinel

Microsoft Purview

Job description

Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is seeking an APS6 Cyber Security Analyst to join the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. You will contribute to day-to-day security operations, assurance activities and capability uplift across Microsoft security platforms and enterprise technologies.

The role requires sound judgement, clear communication and the ability to manage competing priorities