Senior Security Analyst - Global SOC Investigator

Gartner; Sydney; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Job summary

Gartner Information Security in Sydney seeks a Senior Security Analyst to strengthen our global Security Operations capability, independently handling complex investigations, improving detection and response, and protecting Gartner’s people, data and intellectual property across time zones.

This hands-on role requires strong technical capability, sound judgement and clear communication, acting as an escalation point, mentor, and builder of better detection, investigation and response processes

Qualifications

• Bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience preferred.
• Certifications such as GCIH, GCFA, or comparable credentials are advantageous.
• Three to five years of information security or security operations experience.

Responsibilities

• Independently investigate security incidents from triage through containment, remediation and closure.
• Correlate evidence across SIEM, EDR, cloud, email, proxy, network to determine root cause and impact.
• Produce concise investigation notes and incident reports for technical teams and stakeholders.
• Develop and tune detection content and playbooks aligned with MITRE ATT&CK and related frameworks.
• Develop practical tools and automation to reduce repetitive work and improve SOC efficiency.
• Hunt for malicious activity across endpoints, networks and cloud environments.

Skills

Investigation capability

Technical depth

Cloud skills

Proactive defense

Automation mindset

Communication

Growth mindset

Education

Bachelor's degree in cybersecurity, computer science, or engineering

GCIH/GCFA or comparable certifications advantageous

Tools

SIEM/XDR

EDR

Email security

Web proxy

Digital forensics

Job description

Gartner Information Security in Sydney seeks a Senior Security Analyst to strengthen our global Security Operations capability, independently handling complex investigations, improving detection and response, and protecting Gartner’s people, data and intellectual property across time zones.

This hands-on role requires strong technical capability, sound judgement and clear communication, acting as an escalation point, mentor, and builder of better detection, investigation and response processes