Senior Security Operations Analyst

Hatch; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Australian Payments Plus is seeking a Senior Security Operations Analyst in Sydney to protect its technology environments by identifying, investigating and responding to security events and incidents.

The role covers security operations, incident management, vulnerability assessment, threat intelligence, and data analysis, with responsibilities including monitoring across SIEM/EDR, coordinating containment and remediation, and developing playbooks.

Qualifications

• Senior security operations professional with hands-on experience across security operations and incident management.
• Experience with vulnerability assessment, threat intelligence, and data analysis in complex environments.
• Strong understanding of security controls, incident/problem management, and security tooling.

Responsibilities

• Lead security monitoring across enterprise environments using SIEM, EDR and cloud security platforms, including review of alerts across security tools.
• Investigate security alerts and indicators of compromise, correlate threat intelligence with internal telemetry and conduct proactive threat hunting.
• Provide tuning recommendations for detection rules, use cases and alerting mechanisms to improve detection capability and reduce false positives.
• Review MSSP threat-hunting reports and provide recommendations to improve the quality and relevance of findings.
• Coordinate and lead the response to security incidents, including containment, eradication and recovery activities.
• Perform detailed investigations to determine root cause, impact and remediation actions, and produce incident reports, lessons learned and post-incident reviews.
• Identify opportunities to improve security operations processes, tooling and automation, and develop and maintain playbooks, runbooks and standard operating procedures.
• Work with Security Engineering to develop test cases based on the AP+ threat profile and contribute to the maturity of MSSP capabilities.
• Lead vulnerability assessment activities, assess security risk and coordinate remediation efforts across relevant teams.
• Track remediation activities and work with remediation teams to address SLA breaches and reduce repeat SLA misses.
• Provide risk-based recommendations on vulnerabilities, system changes and new technologies.
• Act as a senior escalation point for complex security issues and provide specialist advice to stakeholders.
• Prepare and present security metrics, operational reports and risk summaries.

Skills

Security operations

Incident management

Threat intelligence

Data analysis

Vulnerability assessment

Operational technology support

Cyber security certification

Communication skills

Job description

This is a Senior Security Operations Analyst role with Australian Payments Plus based in Sydney, NSW, AU

Australian Payments Plus

Role Seniority - senior

More about the Senior Security Operations Analyst role at Australian Payments Plus

Life @ AP+

We are one connected team in pursuit of one inspiring purpose - to unite people and technology to power better experiences. Each of us has a part to play in making that happen. You'll be encouraged to bring your big ideas forward and make a difference through your work. Taking steps forward in your career whilst still having room for fun, friendships, and flexibility in your daily life. We're driven by our core values: lead with heart, learn for tomorrow and live our legacy. A purpose like ours takes the inspired impact of an incredible team. Ready to change the game? We're ready to help you do it.

The Purpose

As a Senior Security Operations Analyst, you'll help protect the technology environments that support AP+ by identifying, investigating and responding to security events and incidents. You'll play an important role in maintaining the day-to-day security of our environment, helping ensure potential threats are detected early, investigated thoroughly and managed through to resolution. This is a hands-on role across security operations, incident and problem management, vulnerability assessment and threat intelligence. You'll monitor security events and alerts, investigate suspected incidents and security breaches, and use security data to identify patterns, emerging threats and recurring issues. You'll help turn this information into practical actions that strengthen our security controls and reduce the likelihood or impact of future incidents. You'll also contribute to the continuous improvement of security operations by analysing trends, supporting root-cause investigations, improving operational processes and helping implement preventative measures. Working with security and technology teams, you'll help ensure security policies, controls, and operational procedures are working effectively and that security issues are investigated, escalated and resolved in line with agreed processes and service levels. The role also provides an opportunity to contribute to threat intelligence and vulnerability assessment activities, helping AP+ better understand its threat landscape and identify vulnerabilities across its technology environment.

Key Responsibilities The Role Owns

• Lead security monitoring across enterprise environments using SIEM, EDR and cloud security platforms, including review of alerts across security tools.
• Investigate security alerts and indicators of compromise, correlate threat intelligence with internal telemetry and conduct proactive threat hunting.
• Provide tuning recommendations for detection rules, use cases and alerting mechanisms to improve detection capability and reduce false positives.
• Review MSSP threat-hunting reports and provide recommendations to improve the quality and relevance of findings.
• Coordinate and lead the response to security incidents, including containment, eradication and recovery activities.
• Perform detailed investigations to determine root cause, impact and remediation actions, and produce incident reports, lessons learned and post-incident reviews.
• Identify opportunities to improve security operations processes, tooling and automation, and develop and maintain playbooks, runbooks and standard operating procedures.
• Work with Security Engineering to develop test cases based on the AP+ threat profile and contribute to the maturity of MSSP capabilities.
• Lead vulnerability assessment activities, assess security risk and coordinate remediation efforts across relevant teams.
• Track remediation activities and work with remediation teams to address SLA breaches and reduce repeat SLA misses.
• Provide risk-based recommendations on vulnerabilities, system changes and new technologies.
• Act as a senior escalation point for complex security issues and provide specialist advice to stakeholders.
• Prepare and present security metrics, operational reports and risk summaries.

You’ll likely be a strong fit for this role if

You're a security operations professional who enjoys investigating what's happening beneath the surface and turning security signals into practical action. You'll bring experience across security operations, incident management, vulnerability assessment, threat intelligence, data analysis or operational technology support in a complex environment.

You'll have a good understanding of security controls, incident and problem management, vulnerability assessment, threat intelligence, operational security tooling and controls. You'll be comfortable analysing information from multiple sources, identifying patterns and trends, and communicating your findings clearly to both technical and non-technical stakeholders.

Most importantly, you'll bring a curious and methodical approach to security investigations, with the judgement to know when to elevate an issue and the mindset to look beyond resolving the immediate problem to identify what can be improved for next time. A relevant qualification, certification or equivalent practical experience in cyber security, information technology or security operations will be valuable.

What Happens Next

At AP+, we believe in the power of passion, pride and purpose. Our team is driven by a shared mission to make a difference in the world of payments, and we're proud to work together towards this common goal.

If you're a security operations professional who enjoys investigating threats, solving complex security issues and helping make technology environments more secure, we'd love to hear from you.

If you're ready to be a game changer, please submit your application. The Talent Acquisition team will endeavor to review your application and notify you of the outcome within the next two weeks.

We want to remove all barriers to inclusion, so if you need advice or support with your application, we're here to help. Please reach out to [e-mail]. We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.

Before we jump into the responsibilities of the role. No matter what you come in knowing, you'll be learning new things all the time and the Australian Payments Plus team will be there to support your growth.

Please consider applying even if you don't meet 100% of what's outlined

Key Responsibilities

• Leading security monitoring
• Investigating security alerts
• Coordinating incident response

Key Strengths

• Security operations
• Data analysis
• Incident management
• Cyber security certification
• Operational technology support
• Communication skills

Why Australian Payments Plus is partnering with Hatch on this role.

Hatch exists to level the playing field for people as they discover a career that’s right for them. So when you apply you have the chance to show more than just your resume.

A Final Note: This is a role with Australian Payments Plus not with Hatch.