Security AnalystJust posted!

Talent Web Recruitment; Sydney; On-site; AUD 90,000 - 130,000; Full time

Benefits offered by this job

12-month contract

Sydney CBD location

4-day work week

Job summary

Talent Web Recruitment seeks a skilled Security Analyst to join a Sydney-based team in an international financial services organisation. You will monitor application-layer security, develop alerts, and lead threat assessment while collaborating with senior leaders.

You should have strong intrusion analysis, Splunk expertise, and solid knowledge of common network protocols. The role requires a 4-day workweek and a 12-month contract in Sydney's CBD.

Qualifications

• Identify and interpret web and application logs from a security perspective.
• Ability to analyze logs in Splunk and create alerts/dashboards.
• Identify common exploits from web and event logs.
• Experience with Linux, Windows, and macOS.
• Familiarity with HTTP, DNS, TLS protocols.
• Experience with SIEMs such as Splunk or Elasticsearch.

Responsibilities

• Function as a member of an enterprise network application-layer IDS/IPS and response team.
• Develop and implement custom alerts and monitoring controls to detect threats.
• Provide leadership in assessing new threat vectors and implementing controls.
• Leverage investigative skills using data correlation and log analysis tools.
• Triage security events with senior leaders and report on initiatives.
• Develop processes or controls in support of audit and risk requirements.

Skills

Intrusion analysis

Splunk

Exploits knowledge

OS knowledge

Scripting & regex

Network protocols

Web-app analysis

SIEM analytics

Tools

Splunk

Job description

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role:

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

Your skills:

• Strong Intrusion Analysis background. You must be able to identify and interpret web and application logs from a security perspective.
• Strong Splunk skill set. You will leverage Splunk to analyze logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
• Knowledgeable of current exploits. You must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems
• Comfortable with scripting languages and regular expressions
• Strong knowledge common network protocols, especially HTTP, DNS, TLS
• Working knowledge of enterprise Client / Server architecture

Skills specific to your role:

• Understanding of how web-applications work under the hood and related protocols such as HTTP/HTTPS
• Common attack vectors against web-applications (OWASP top 10 and beyond)
• How to identify attacks/malicious activities through analysis of logs generated by applications, authentication, end-point, security appliances, etc

Your Experience:

• Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
• An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
• Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch
• Broad awareness of information security operations and/or enterprise information technology

Your working hours will be 40 hours over 4-days per week -Wednesday to Saturday.They are a front-line team that handles active security events and current threats. On call and after hours work can be expected, although they rotate to approximately one week every 2 months.