Rail Cybersecurity Senior Analyst - Incident Response

Metro Trains Sydney Pty; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Fitness Passport discounts

Vehicle leasing options

Employee recognition

EAP services

Job summary

Metro Trains Sydney Pty is seeking a collaborative cyber security professional to lead investigation and response to cyber security incidents across IT and OT environments, coordinating assurance activities, remediation, security monitoring and resilience exercises.

You will translate complex cyber risks into practical actions, work with SOC/MSSP/MDR providers, and drive playbooks, metrics and executive reporting to protect critical rail operations.

Qualifications

• Four to six years’ experience in Cyber security operations or cyber resilience, ideally within critical infrastructure, transport, utilities, energy or industrial environments.
• Demonstrated experience coordinating cyber incident response, including containment, recovery, evidence preservation and post-incident reviews.
• Experience working with SOC, MSSP, MDR, DFIR or external cyber security providers.
• Strong capability across SIEM, EDR/XDR, vulnerability management, penetration testing, firewalls, network segmentation and cloud security.

Responsibilities

• Lead technical investigation and triage of cyber security incidents affecting IT and OT environments.
• Coordinate containment, eradication, recovery and post incident review activities.
• Strengthen security monitoring and detection capability in partnership with SOC, MSSP and cyber operations providers.
• Plan and facilitate cyber security tabletop exercises, desktop exercises and incident simulations.
• Coordinate penetration testing, vulnerability assessments and risk based remediation programs.
• Support the implementation and validation of cyber security technologies across IT and OT environments.
• Develop cyber security playbooks, procedures, metrics, dashboards and management reporting.

Skills

Cyber security operations

Incident response

SIEM

EDR/XDR

Cloud security

Executive reporting

Education

Tertiary qualification in Cyber Security

Tools

Splunk

Microsoft Azure

Microsoft 365

EDR/XDR tooling

Job description

Metro Trains Sydney Pty is seeking a collaborative cyber security professional to lead investigation and response to cyber security incidents across IT and OT environments, coordinating assurance activities, remediation, security monitoring and resilience exercises.

You will translate complex cyber risks into practical actions, work with SOC/MSSP/MDR providers, and drive playbooks, metrics and executive reporting to protect critical rail operations.