Senior Cybersecurity Analyst

Digital Native - Digital & Technology Recruitment; Brisbane; On-site; AUD 96,000 - 165,000; Full time

Job summary

Digital Native - Digital & Technology Recruitment is seeking an experienced security analyst to take alerts from first contact through to remediation. You will work in a hands-on role that cuts across identities, endpoints, networks, cloud and applications to defend systems and drive fixes.

You will lead detection engineering, write rules, build dashboards and ensure monitoring coverage is robust. Milton, Brisbane, offers a 6-month initial contract with an hourly rate negotiable.

Qualifications

• Around five years in security operations, incident response or detection engineering, including investigations you led on your own.
• Hands-on skill with a SIEM and endpoint detection tooling, including writing queries and detections.
• Demonstrated ability to adapt quickly to a new environment and contribute within weeks.

Responsibilities

• Run investigations and incidents from first alert to closure, defining scope, impact and fix.
• Pull evidence across identities, endpoints, networks, cloud and applications to support defended conclusions.
• Own detection engineering: write and tune rules, build dashboards and queries, close monitoring gaps.

Skills

Security operations

Incident response

Detection engineering

SIEM

Endpoint detection tooling

Query writing

Tools

SIEM

Endpoint detection tooling

Job description

Our client builds and runs technology that critical infrastructure depends on every day. When it stops, people notice. Their in-house security team protects it, backed by a managed security provider that handles the overnight watch.

They need an analyst who can take an alert, work out what happened, and see it through to the fix without being told how, from the first week.

What you will do

• Run investigations and incidents from first alert to closure. You set the scope, find the cause, judge the impact and drive the fix.
• Pull evidence together across identities, endpoints, networks, cloud and applications, and reach conclusions you can defend.
• Own detection engineering. Write and tune rules, build dashboards and queries, and close gaps in monitoring coverage.
• Keep the security platforms healthy and hold vendors and the managed provider to what they promised.
• Assess vulnerabilities in context and tell system owners what matters and why.
• Write reports and control evidence that managers and auditors can act on.
• Build playbooks, scripts and automation that keep working after you leave.
• Pass on what each incident taught you to the less experienced analysts.

What you bring

• Around five years in security operations, incident response or detection engineering, including investigations you led on your own.
• Hands-on skill with a SIEM and endpoint detection tooling [name the stack once confirmed], including writing queries and detections.
• A record of being useful in a new environment within weeks, not months.
• Sound judgement when the evidence is incomplete, and the honesty to say so.
• The ability to coordinate engineers who do not report to you, and to explain technical risk to people who are not technical.

Useful but not required: SC-200, GCIH, GCIA or similar, cloud security experience, vulnerability management tooling, time at a managed security provider.

• Hourly Rate Negotiable on Experience
• 6 Month Initial Contract
• Milton Location (2-3 days a week in office)