Senior Cyber Operations Analyst

Client 1; Canberra; Ibrido; AUD 120.000 - 160.000; Tempo pieno

Vantaggi offerti da questo lavoro

Long-term contract

Hybrid working

Exposure to Microsoft security tech

Collaborative cyber security team

Opportunity to influence security ops

Descrizione del lavoro

Cleared is seeking Senior Cyber Operations Analysts to join a high-performing cyber security function. You will monitor, detect, respond to incidents, hunt threats, and contribute to vulnerability management within a Microsoft-centric environment.

You will collaborate with security engineers, managed providers and stakeholders to strengthen operations, develop playbooks, and drive continuous improvement. Hybrid work model and NV1 clearance required.

Competenze

• Experience within Cyber Security Operations Centres (SOC) or cyber operations environments.
• Demonstrated experience leading cyber security incident response activities.
• Hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Endpoint, Purview and Entra ID.

Mansioni

• Lead cyber security incident investigations from initial detection through to containment, remediation and recovery.
• Conduct proactive threat hunting activities across enterprise environments.
• Develop and improve incident response playbooks, procedures and investigation guides.
• Support cyber incident response planning, testing and preparedness activities.
• Provide subject matter expertise across Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Purview and Entra ID.

Conoscenze

SOC experience

Incident response leadership

Threat hunting

Stakeholder engagement

Automation & tooling

Strumenti

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Defender for Endpoint

Microsoft Purview

Microsoft Entra ID

Descrizione del lavoro

Senior Cyber Operations Analyst

Location: ACT, NSW, VIC or QLD
Working Arrangement: Hybrid
Clearance Required: Ability to obtain NV1 Security Clearance
Employment Type: 12-Month Contract + 2 x 12-Month Extension Options

About the Opportunity

An exciting opportunity is available for multiple Senior Cyber Operations Analysts to join a high-performing cyber security function supporting a large and complex enterprise environment. Working within a Microsoft-centric ecosystem, you will play a key role in cyber security monitoring, threat detection, incident response, threat hunting, vulnerability management and continuous improvement initiatives.

This role offers the opportunity to work alongside cyber security engineers, analysts, managed security providers and key stakeholders to strengthen security operations capabilities and protect critical systems and information assets.

Key Responsibilities

Incident Response & Threat Hunting

• Lead cyber security incident investigations from initial detection through to containment, remediation and recovery.
• Conduct proactive threat hunting activities across enterprise environments.
• Develop and improve incident response playbooks, procedures and investigation guides.
• Support cyber incident response planning, testing and preparedness activities.

Security Operations

• Provide subject matter expertise across Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Purview and Entra ID.
• Improve security monitoring, detection and response capabilities.
• Collaborate with engineering teams to enhance telemetry, automation and detection content.
• Support onboarding of new security data sources and improve security visibility across cloud and on-premises environments.

Technical Leadership

• Provide mentoring, coaching and operational guidance to cyber security analysts.
• Perform technical quality assurance across investigations and threat hunting activities.
• Drive improvements to tooling, automation, operational processes and AI-enabled capabilities.
• Promote best practices and continuous capability uplift across the team.

Stakeholder Engagement

• Work closely with internal ICT teams, cyber security specialists and managed security service providers.
• Review and validate security monitoring outputs and investigation findings.
• Provide practical, risk-based cyber security advice to stakeholders.
• Support vulnerability management and broader security improvement initiatives.

Required Experience

• Strong experience within Cyber Security Operations Centres (SOC) or cyber operations environments.
• Demonstrated experience leading cyber security incident response activities.
• Hands-on experience with:
  • Microsoft Sentinel
  • Microsoft Defender XDR
  • Microsoft Defender for Endpoint
  • Microsoft Purview
  • Microsoft Entra ID
• Experience conducting threat hunting, security investigations and digital forensics activities.
• Understanding of vulnerability management and attack surface reduction.
• Experience developing operational procedures, automation and security improvements.
• Strong stakeholder engagement and communication skills.

Benefits

• Long-term contract opportunity with extension options.
• Work with leading Microsoft security technologies.
• Join a collaborative and mature cyber security team.
• Opportunity to influence security operations strategy and capability uplift.
• Flexible hybrid working arrangements.

Diversity and Inclusion

Applications are encouraged from candidates of all backgrounds, experiences and perspectives. Diversity strengthens teams and drives better outcomes.

Veterans

Veterans and former serving members with relevant cyber security experience are strongly encouraged to apply.

About Cleared

Cleared is a specialist recruitment consultancy focused on Defence, National Security and Federal Government. We connect security-cleared professionals with opportunities across Australia's most critical projects and organisations.