Hybrid Cyber Security Analyst — SOC & Threat Hunting

Thales; Sydney; Hybrid; AUD 90,000 - 140,000; Full time

Benefits offered by this job

ThalesFlex – Hybrid work environment

Fitness Passport

Employee discounts

Parental Leave

Novated Lease

Training & development

Wellbeing & Support

Job summary

Thales Australia is seeking a Cyber Security Analyst to protect our systems, networks and data. You will operate in the Security Operations Centre (SOC), monitoring, investigating and responding to cyber threats across enterprise, cloud and identity environments.

You’ll work with IT teams to detect, contain and recover from incidents, tune alerts and develop automated workflows. The role requires hands-on experience with Microsoft Sentinel, Defender suites and SIEM tools, plus knowledge of MITRE

Qualifications

• Experience in a Security Operations Centre (SOC) or similar cyber security environment.
• Hands-on with Microsoft Sentinel for monitoring, investigations, hunting, alert tuning, and dashboards.
• Strong knowledge of Defender technologies including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365.
• Experience with Microsoft Purview for data security, insider risk, or compliance investigations.
• Knowledge of MITRE ATT&CK and threat detection methodologies.
• Experience with SIEM and log analytics across endpoint, identity, network, cloud, and email environments.
• Experience investigating endpoint-based security incidents using EDR/XDR technologies.
• IAM concepts including privileged access, account compromise, and lateral movement.

Responsibilities

• Monitor, triage, and investigate security alerts across enterprise, cloud, identity, endpoint, and data environments.
• Identify, analyse, and respond to cyber security incidents in line with policy.
• Conduct threat hunting and investigative activities to identify anomalous or malicious behaviour.
• Support containment, remediation, and recovery activities with IT and business stakeholders.
• Operate and support SOC tooling including SIEM, EDR/XDR, monitoring and incident response technologies.
• Develop automated investigation and response workflows.
• Investigate identity-related security events and support data protection investigations.
• Improve detection through alert tuning and new telemetry sources.
• Produce clear incident documentation for technical and non-technical stakeholders.

Skills

SOC experience

Threat detection

Analytical thinking

Team collaboration

Tools

Microsoft Sentinel

Defender for Endpoint

Defender for Identity

Defender for Cloud

Defender for Office 365

Microsoft Purview

SIEM

EDR/XDR

Job description

Thales Australia is seeking a Cyber Security Analyst to protect our systems, networks and data. You will operate in the Security Operations Centre (SOC), monitoring, investigating and responding to cyber threats across enterprise, cloud and identity environments.

You’ll work with IT teams to detect, contain and recover from incidents, tune alerts and develop automated workflows. The role requires hands-on experience with Microsoft Sentinel, Defender suites and SIEM tools, plus knowledge of MITRE