Senior Cloud Security Operations Analyst

Pegasystems; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Pega is expanding its Cloud Security Operations Center in Sydney and seeks a skilled security engineer to monitor, detect, and respond to threats in our cloud environment. You will collaborate with threat detection engineers, vulnerability analysts, and security engineers to strengthen our threat posture and incident response capabilities.

You’ll apply AI-enabled tools with rigorous judgment, develop SOPs and playbooks, and perform threat hunts to protect Pega Cloud across global deployments.

Qualifications

• 4+ years of industry-relevant experience in cloud security and threat detection.
• 2+ years in operational SIEM roles with Cloud logs analysis.
• Australian citizenship is required for this role.

Responsibilities

• Perform security monitoring of cloud environments using multiple tools and dashboards.
• Investigate security events to identify Indicators of Compromise (IOCs).
• Contribute to incident response: containment, eradication, recovery.
• Develop SOPs, policies, and playbooks for CSOC detection and analysis.
• Enhance incident response plans and remediation recommendations.
• Perform threat hunts for adversarial activity within Pega Cloud.
• Develop notable dashboards and situational reports using SIEM tools.

Skills

Security analysis

Incident response

Threat hunting

AI-Enabled tooling judgment

Team collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Google Chronicle SIEM

AWS

GCP

Kubernetes (EKS/GKE)

Job description

Meet Our Team

Pega is a leader in customer engagement and digital process automation, delivering a commercial SaaS version of our industry-leading platform to clients worldwide. The Pega Cloud Security Operations Center (CSOC) protects our commercial cloud assets and offerings by deterring, detecting, denying, delaying, and defending against threats. Our team delivers detection, monitoring, and incident response services for Pega Cloud, and we're growing our presence in Sydney to support our global cloud security mission.

Picture Yourself At Pega

Play a critical role in ensuring the confidentiality, integrity, and availability of Pega's commercial cloud infrastructure. You'll be central to continuous monitoring, protection of global cloud security operations, and incident response — collaborating with threat detection engineers, vulnerability analysts, and security engineers to identify risks and strengthen our cloud security frameworks. Pega is actively embracing emerging AI capabilities, and you'll be expected to use AI-enabled tools to boost efficiency and decision-making — always applying critical thinking to validate AI-generated outputs before they're put into production.

What You'll Do At Pega

• Perform security monitoring of Pega Cloud commercial environments using multiple tools and dashboards
• Investigate security events to identify Indicators of Compromise (IOCs)
• Contribute to incident response activities: identification, containment, eradication, and recovery
• Develop Standard Operating Procedures (SOPs), policies, and playbooks for CSOC detection and analysis
• Enhance security incident response plans and recommend remediation measures
• Perform threat hunts for adversarial activities within Pega Cloud
• Assist in developing high-confidence Splunk notables and situational awareness dashboards/reports

Who You Are

• You bring insatiable curiosity and tenacity for defending against bad actors
• You have spent time in the "security trenches" and understand how efficient SOC operations run
• You bring a wealth of cloud security experience and are ready to lead technical analysis and incident response
• You have a track record of success in the information security industry
• AI-First Mindset (essential): You can use and reason with AI tools, validate their outputs, apply sound judgment, and demonstrate real-time thinking through artifacts like Pega GenAI Blueprints
• Growth Mindset (essential): You show learning agility, adaptability, openness to feedback, a willingness to iterate, and a bias toward action over perfection

Your List of Accolades Include

• SANS, Offensive Security, or other top-tier technical security certifications focused on analysis, detection, and/or incident response
• Industry recognition for identifying security gaps to secure applications or products

What You've Accomplished

• Must-Have: Australian citizenship is required for this role
• 4+ years of industry-relevant experience with knowledge of cloud architecture, infrastructure, and resources
• 2+ years in operational SIEM roles (analysis, investigations, incident response); Google Chronicle SIEM experience is a plus
• 2+ years of operational cloud security experience (AWS and/or GCP preferred), including analysis of logs such as CloudTrail, Cloud Audit, GuardDuty, VPCFlow, and WAF
• 2+ years of operational experience with EDR/XDR platforms
• Operational experience with Linux, Windows, AWS, GCP, and Kubernetes (EKS/GKE)
• Solid knowledge of the MITRE ATT&CK framework, particularly the cloud matrix
• Familiarity with OWASP Top 10 vulnerabilities
• Foundational understanding of OS (Linux/Windows) and network architecture
• Scripting experience (Python, Linux shell/bash, PowerShell) is a plus
• Excellent verbal and written communication, with the ability to remain poised under pressure
• Demonstrated ability to foster a healthy, productive team culture
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or a related field

Pega Offers You

• Gartner Analyst-acclaimed technology leadership
• Continuous learning and development opportunities
• An innovative, inclusive, agile, and flexible work environment
• Competitive benefits package (salary, bonus incentive, and employee equity)
• The opportunity to work at the forefront of AI-enabled innovation