Security Analyst

Softtest Pays; South Australia; On-site; AUD 100,000 - 120,000; Full time

Job summary

A leading IT security firm is looking for a Security Infrastructure Analyst to perform analyses of cyber security monitoring and provide strategic advice on security configurations. Candidates should have experience with IBM QRadar and knowledge of industry standards, particularly in a large complex environment. Responsibilities include managing security requirements and advising on security policies. The role is based in South Australia, with a contract starting August 2023 and potential extensions.

Qualifications

• Experience with analysing gateway and network security monitoring solutions.
• Specialist knowledge of SIEM configuration and SOC operations.
• Knowledge of Federal Government information security policy.

Responsibilities

• Elicit, analyse and manage security requirements.
• Manage prioritisation and escalation of security issues.
• Provide technical infrastructure security advice.

Skills

Cyber security monitoring

IBM QRadar

Network security engineering

Security Information and Event Management (SIEM)

Mitre Att&ck framework

Mitre D3fend framework

Job description

Overview

Australian Citizens with Baseline Clearance residing in Australia only respond.

Contract start 01 August 2023 to 5 months, 2 x 6 months extensions.

Primary Technologies

QRadar, Secure Internet Gateways, Network security engineering and operations.

Role summary

The security infrastructure analyst will have experience in performing current state analysis, requirements analysis definition and implementation of cyber security monitoring and reporting services, specifically with regards to secure gateway operations, monitoring and related Security Information and Event Management (SIEM) services. Skills and experience in IBM QRadar, network gateways and the Mitre Att&ck and Mitre D3fend frameworks are preferred. Provide security analysis of the current state, report options and recommendations, and specify an uplift and enhancement program for the reporting of cyber metrics to Customers of the Services Australia Shared Services Gateway.

Responsibilities

• Elicit, analyse and manage security requirements to meet demand.
• Manage the prioritisation and escalation of security issues.
• Communicate the end-to-end implications of security configuration changes.
• Analyse the cyber security impacts of requests for change management.
• Provide detailed specialist technical infrastructure security advice, including strategic advice to the senior executive where appropriate.
• Proactively share knowledge and expertise as the subject matter expert, and provide assistance and mentorship to less experienced colleagues.
• Assist in the development and implementation of cyber security strategies, policy and procedures and change initiatives.
• Undertake research on emerging technologies and provide recommendations on products and suitability for the agency.
• Prepare, review and maintain documentation which may include design documentation, implementation plans, test plans.
• Support procedures, encourage innovation, continuous improvement and manage and support change.

Selection criteria / Qualifications

1. Demonstrated experience and success with analysing gateway and network security monitoring solutions in large complex environments, including specialist knowledge of SIEM configuration, SOC operations and reporting.
2. Demonstrated experience in the configuration and deployment of IBM QRadar, use case development and associated reporting capabilities.
3. Demonstrated knowledge of industry Cyber Security frameworks, best practices and standards including the Mitre Att&ck and D3fend frameworks.
4. Demonstrated knowledge and experience with security requirements and solutions with regard to Federal Government information security policy (i.e. Information Security Manual, Protective Security Policy Framework) and the ACSCs Cyber Security principles and guidelines.