Security Operations Analyst

Jobgether; Australia; Remote; AUD 110,000 - 140,000; Full time

Benefits offered by this job

Remote work in Australia

AUD 800 home office setup allowance

Monthly AUD 185 digital allowance

Monthly AUD 40 home-office tech stipen

12 weeks parental leave

Private health insurance

Annual US trip for Summer Summit

Job summary

Jobgether is partnering with a company in Australia to recruit a hands-on Security Operations Analyst. You will join a globally distributed cybersecurity team to investigate intrusions, analyse telemetry, and help detect, contain, and remediate threats in a remote-first environment.

Responsibilities include monitoring alerts, forensic analysis, malware assessment, cloud and on-premise threat visibility, and collaborating with product/engineering to improve detection and response capabilities.

Qualifications

• At least 2 years of professional experience in Security Operations, Incident Response, MDR, or Digital Forensics.
• Experience with Windows, Linux, or macOS and their attack surfaces.
• Understanding of Active Directory, PowerShell, Group Policy, and local accounts.
• Familiarity with MITRE ATT&CK framework and adversary techniques.
• Strong networking fundamentals (ports, protocols, NAT, IP addressing, VLANs).
• Strong investigative and analytical skills for digital forensics, logs, and artifacts.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts; coordinate remediation.
• Analyse EDR/SIEM telemetry, logs, and artefacts to determine attack scope.
• Perform dynamic malware analysis to identify malicious behaviour and extract IOC.
• Investigate attacker activity across Windows, Linux, and macOS environments; identify credential dumping, lateral movement, persistence, exfiltration.
• Analyse Microsoft 365 and Google Workspace activity; secure compromised accounts and tenants.
• Develop, refine, and optimise detection capabilities and alert quality.
• Support customer success with escalations and security questions.
• Collaborate with Product and Engineering to improve security products and AI-assisted workflows.
• Continually develop knowledge via real-world investigations, threat research, and responsible use of AI tools.
• Contribute to cybersecurity research and industry knowledge-sharing.

Skills

Security Operations

Incident Response

Digital Forensics

Threat Hunting

Communication

Tools

EDR

SIEM

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst based in Australia.

We are looking for a hands-on Security Operations Analyst to join a globally distributed cybersecurity team dedicated to protecting businesses against increasingly sophisticated cyber threats. In this role, you will investigate active intrusions, analyse endpoint telemetry and forensic evidence, and help detect, contain, and remediate malicious activity. You will work with advanced EDR and SIEM technologies, contribute to threat detection improvements, and support incident response initiatives. Collaborating with Security Operations, Product, and Engineering teams, you will help strengthen security capabilities and improve customer protection. This is an opportunity to work on real-world cyber incidents, develop your technical expertise, and make a meaningful impact in a remote-first environment.

Accountabilities:

• Monitor, triage, investigate, and respond to security alerts generated by the cybersecurity platform, identifying threats and coordinating appropriate remediation.
• Analyse EDR/SIEM telemetry, system logs, and forensic artifacts to determine attack root causes and understand the full scope of security incidents.
• Perform dynamic malware analysis when required to identify malicious behaviour, extract indicators of compromise, and assess suspicious files.
• Investigate attacker activity across Windows, Linux, and macOS environments, identifying techniques such as credential theft, lateral movement, persistence, and data exfiltration.
• Analyse suspicious activity within Microsoft 365 and Google Workspace environments, providing actionable recommendations to secure compromised accounts and tenants.
• Develop, refine, and optimise detection capabilities by creating and tuning security signals, improving alert quality, and maintaining efficient investigation workflows.
• Support customer success by assisting security support teams with escalations and technical questions relating to threats and security operations.
• Collaborate with Product and Engineering teams to improve security products, detection mechanisms, and human-led, AI-assisted security workflows.
• Continuously develop technical knowledge through real-world investigations, professional training, threat research, and the responsible use of AI tools to improve analytical efficiency.
• Contribute to the wider cybersecurity community by sharing research, insights, and technical expertise through publications, webinars, blogs, and industry events.

Requirements:

• At least 2 years of professional experience in Security Operations, Incident Response, Managed Detection and Response (MDR), or Digital Forensics.
• Practical knowledge of at least one major operating system: Windows, Linux, or macOS, including its attack surfaces, malware behaviour, and common threat actor techniques.
• Understanding of system administration concepts and how attackers exploit them, including Active Directory, PowerShell, Group Policy, and local account management.
• Familiarity with the MITRE ATT&CK framework and common adversary tactics, including credential dumping, lateral movement, persistence, and data exfiltration.
• Good understanding of networking fundamentals, including ports, protocols, NAT, public and private IP addressing, and VLANs.
• Strong investigative and analytical skills, with a genuine interest in digital forensics, analysing system logs, processes, and artifacts to uncover malicious activity.
• Ability to communicate technical findings clearly and translate complex security issues into practical recommendations for different audiences.
• Strong written and verbal communication skills, combined with curiosity, initiative, and a commitment to continuous professional development.
• Experience using AI tools to support security research and daily analysis, with the ability to critically validate outputs before taking action.
• A collaborative mindset, resilience under pressure, and the ability to take ownership of investigations and deliver effective outcomes.
• Willingness to work Monday to Friday, from 8:00 AM to 4:00 PM Perth time (AWST). Candidates based elsewhere in Australia must be able to accommodate these working hours in their local time zone.

Benefits:

• Fully remote working arrangement from anywhere in Australia.
• Competitive annual base salary ranging from AUD 110,000 to AUD 140,000, plus performance-based bonus and equity opportunities.
• Stock options available to all full-time employees.
• AUD 800 reimbursement towards setting up your home office when joining.
• Monthly AUD 185 digital allowance to help cover personal phone and internet expenses.
• Additional monthly AUD 40 home-office technology stipend for equipment upgrades and replacements.
• 12 weeks of paid parental leave for both primary and secondary carers.
• Subsidised private health insurance through a preferred provider.
• Access to the BetterUp platform for personal development, professional coaching, and career growth.
• Opportunities for paid training and continuous technical development.
• At least one annual trip to the United States for the company-wide Summer Summit, alongside additional local events in Australia.
• A supportive, inclusive, and collaborative international team environment.
• Opportunities to contribute to cutting-edge cybersecurity research, product innovation, and industry knowledge-sharing initiatives.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.