Security AnalystNew

Talent Web Recruitment; Sydney; On-site; AUD 90,000 - 110,000; Full time

Benefits offered by this job

4-day week

Job summary

Talent Web Recruitment is seeking a skilled Security Analyst to join our Sydney-based team for an international financial services organisation. You understand SOC procedures with intermediate to expert level skills in a Tiered SOC model (L2/L3).

You will work in a 4-day week from the Sydney CBD, contributing to enterprise network security, alerting, and threat mitigation while collaborating with senior leaders across business units.

Qualifications

• Strong intrusion analysis background with ability to interpret web and application logs from a security perspective.
• Proficient in Splunk for log analysis, alerts and dashboards to identify targeted threats.
• Knowledgeable about current exploits and how to identify them from logs and events.
• Experience with Linux, Windows and macOS operating systems.
• Familiar with scripting languages and regular expressions.
• Solid understanding of HTTP, DNS and TLS network protocols.
• Experience with enterprise client/server architectures.

Responsibilities

• Operate as a member of an enterprise network intrusion detection, prevention, and response team.
• Develop and implement alerts and monitoring controls to detect threats.
• Lead assessments of new threat vectors and design effective controls.
• Use data correlation and log analysis tools to investigate security events.
• Collaborate with senior business leaders to triage security incidents and report on initiatives.
• Develop processes or controls to support audit and risk requirements.

Skills

Intrusion analysis

Splunk

Exploit knowledge

Linux/Windows/macOS

Scripting/Regex

HTTP/DNS/TLS

Client/Server architecture

Job description

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role:

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

Your skills:

• Strong Intrusion Analysis background. You must be able to identify and interpret web and application logs from a security perspective.
• Strong Splunk skill set. You will leverage Splunk to analyze logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
• Knowledgeable of current exploits. You must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems
• Comfortable with scripting languages and regular expressions
• Strong knowledge common network protocols, especially HTTP, DNS, TLS
• Working knowledge of enterprise Client / Server architecture

Skills specific to your role:

• Understanding of how web-applications work under the hood and related protocols such as HTTP/HTTPS
• Common attack vectors against web-applications (OWASP top 10 and beyond)
• How to identify attacks/malicious activities through analysis of logs generated by applications, authentication, end-point, security appliances, etc

Your Experience:

• Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
• An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
• Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch
• Broad awareness of information security operations and/or enterprise information technology

Your working hours will be 40 hours over 4-days per week -Wednesday to Saturday.They are a front-line team that handles active security events and current threats. On call and after hours work can be expected, although they rotate to approximately one week every 2 months.