Security Operations Analyst: AI-Powered Threat Detection

Amwins; Sydney; On-site; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Mental health support

Life & AD&D Insurance

Health Savings Account

Health Care FSA

Parental Leave

401(k) with company match

Paid Time Off

Identity Theft Protection

Job summary

Amwins Australasia Division seeks a Cyber Security Analyst to join the Cybersecurity department. The role is the first line of defense, monitoring with Microsoft Defender XDR, analyzing logs, and addressing security service requests from users.

You will collaborate with internal teams to improve security processes, document operations, and stay current on threats, tools, and AI-assisted detection to enhance response effectiveness.

Qualifications

• 2–3 years of minimum experience in security operations, incident response, or related IT role.
• Hands-on with Defender XDR and Sentinel; proficient in KQL and advanced hunting.
• Understanding of incident response lifecycle, MITRE ATT&CK, SIEM/XDR concepts.

Responsibilities

• Monitor, triage, and respond to security events and alerts using Defender XDR and related tools.
• Conduct in-depth analysis of logs and network traffic to identify threats using KQL.
• Apply AI-assisted capabilities to accelerate triage, investigation, and enrichment.
• Coordinate containment and recovery during incidents with team and partners.
• Respond to and resolve security-related user requests.

Skills

Defender XDR

Microsoft Sentinel

KQL

MITRE ATT&CK

SIEM/XDR concepts

Windows Active Directory/Entra ID

Networking fundamentals

Cloud security

PowerShell

Python

Tools

Microsoft Defender XDR

Microsoft Sentinel

Job description

Amwins Australasia Division seeks a Cyber Security Analyst to join the Cybersecurity department. The role is the first line of defense, monitoring with Microsoft Defender XDR, analyzing logs, and addressing security service requests from users.

You will collaborate with internal teams to improve security processes, document operations, and stay current on threats, tools, and AI-assisted detection to enhance response effectiveness.