Security Operations Analyst

Decipher Bureau; Sydney; On-site; AUD 90,000 - 120,000; Full time

Job summary

Decipher Bureau in Sydney is seeking security professionals to join a proactive, established team. You will investigate incidents, improve threat detection, and work across a Microsoft-focused environment with CrowdStrike and Elastic SIEM.

You’ll tackle vulnerabilities, hardening, and security controls while engaging with Windows, Linux, and cloud infrastructure. You’ll enjoy hands-on problem solving, practical projects, and opportunities to explore automation and AI to enhance security

Qualifications

• Experience in investigating and remediating security incidents; ability to discuss real incidents and remediation.
• Strong understanding of Microsoft environments, Linux, cloud or system hardening.
• Demonstrated ownership of development through practical projects, scripting, automation or self-learning.

Responsibilities

• Investigating and responding to security incidents, from detection through remediation.
• Improving threat detection, hunting and security monitoring.
• Working across a Microsoft-focused environment with CrowdStrike and Elastic SIEM.
• Tackling vulnerabilities, system hardening and security control improvements.
• Getting hands-on with Windows, Linux, cloud environments and infrastructure.
• Exploring automation and AI to improve security operations.

Skills

Incident response

Threat hunting

Security monitoring

Windows

Linux

Cloud environments

Automation

Scripting

Independent learning

Tools

CrowdStrike

Elastic SIEM

Job description

Forget sitting in a SOC queue all day. This is an opportunity to join an established security team where you'll tackle real incidents, solve complex technical problems and work across a broad range of security disciplines.

With a flat structure and no silos, you could be investigating an incident one minute and working around a whiteboard with the wider team on a niche security challenge the next.

The team rarely hires but is looking to bring in up to three strong security professionals. They're more interested in youyour attitude, desire to learn and go the extra yard when required.

What you could be doing

• Investigating and responding to security incidents, from detection through to remediation.
• Improving threat detection, threat hunting and security monitoring.
• Working across a Microsoft-focused environment, including technologies such as CrowdStrike and Elastic SIEM.
• Tackling vulnerabilities, system hardening and security control improvements.
• Getting hands-on with Windows, Linux, cloud environments and wider infrastructure.
• Exploring automation and AI to improve security operations.

No two days are the same. Priorities shift, challenges vary, and you'll collaborate with a broad range of technical specialists to solve real world problems.

What we're looking for

Pertly you have one year's experience, maybe five or six. What matters most is your technical ability, curiosity and willingness to get stuck in.

You might come from a SOC, incident response, security engineering, desktop support with a security flavour. We're keen to hear from people who go beyond their day job, whether that's building home labs, taking part in CTFs, experimenting with new tools or developing their skills independently.

We're particularly interested in people who:

• Can talk through real incidents they've investigated, their approach and how they helped remediate them.
• Enjoy getting hands-on with technology and solving problems independently and collaboratively.
• Have a solid understanding of Microsoft environments, with knowledge of Linux, cloud or system hardening.
• Take ownership of their development through practical projects, scripting, automation or independent learning.
• Are curious about AI and can discuss how they're using it, where it adds value and where its limitations lie.

You don't need to tick every box. Practical ability, initiative and a genuine interest in security matter more than a checklist of tools.

Location: Sydney
Days in the office: 3 days
Package: To be disclosed depending on experience. The organisation looks after their people, and it will be competitive in the market.

*Full Australian working rights required*