Junior Security Analyst - MDR/DFIR Frontline

Triskele Labs; City of Melbourne; On-site; AUD 60,000 - 78,000; Full time

Job summary

Triskele Labs in Melbourne is hiring Level 1 Security Analysts for our 24x7 on-site Security Operations Centre. You will monitor, triage and respond to security events across a broad client base, learning from senior analysts and DFIR specialists while you rotate shifts.

We value aptitude, curiosity and work ethic over years of experience and we will fund your certifications to advance from L1 to a credible security professional.

Qualifications

• Analytical thinking with the ability to assess and prioritise security events.
• Excellent written and verbal communication skills.
• Team player who collaborates in a team-oriented environment.

Responsibilities

• Monitor alert queues and triage security events across client environments, identifying potential security incidents and escalating promptly where required.
• Perform incident prioritisation and triage to determine the severity, scope and likely impact of security issues.
• Escalate alerts requiring deeper investigation to the appropriate tier within the SOC, with clear, complete handover notes.
• Perform efficient triage and ticketing of reported phishing emails, taking timely and appropriate action.
• Conduct dark web monitoring for client exposure and indicators of compromise using established processes.
• Respond to hotline calls promptly and professionally so that no client call is missed.
• Respond to service desk tickets, resolving them or escalating to the appropriate team as required.
• Perform daily health checks across client environments to identify and address potential issues before they affect monitoring coverage.
• Attend and lead shift handover meetings, completing the documentation needed for a clean transition between shifts.
• Create change request tickets for internal and client queries and see them through to resolution.
• Manage and configure security monitoring tooling within the change control process, escalating configuration changes as required.
• Work to individual and tier KPIs aligned to our service commitments.
• Retrieve, assist in producing and issue scheduled weekly and monthly client reports following existing processes.
• Assist in gathering evidence for monthly reporting and client review meetings, and address client queries arising from them.
• Proactively identify opportunities to tune event detection and reduce false positives, passing what you see to our Detection Engineering team with the context they need to act on it.
• Actively identify improvements to internal processes and Standard Operating Procedures, particularly around triage and analysis.
• Continuously develop your skills through formal training and certification, including completing at least one Blue Team Labs Online challenge per month.
• Work collaboratively with the wider SOC and with our Platform Engineering, DFIR, Security Engineering and Service Delivery teams.

Skills

Analytical thinking

Communication skills

Team player

Job description

Triskele Labs in Melbourne is hiring Level 1 Security Analysts for our 24x7 on-site Security Operations Centre. You will monitor, triage and respond to security events across a broad client base, learning from senior analysts and DFIR specialists while you rotate shifts.

We value aptitude, curiosity and work ethic over years of experience and we will fund your certifications to advance from L1 to a credible security professional.