Cyber Security Analyst
Core
Investigate and respond to security events, tune detection rules, and audit logging coverage for enterprise customers using Microsoft Sentinel, SentinelOne, and Splunk.
Role type
Cyber Security Analyst (Incident Response & Detection Engineering)
Builds
Detection content and incident response workflows for Australian enterprise clients
Domain
Cyber Security / SIEM / EDR / XDR
Required skills
Incident response, SIEM operations, detection rule tuning, Microsoft Sentinel, SentinelOne, Splunk, MITRE ATT&CK, NIST, ISO 27000, Linux/Unix administration
Preferred skills
Cloud security, networking, firewall technologies, vulnerability management (Rapid7, Tenable, Qualys), SC-200, Blue Team Level 1/2, SANS Incident Responder, GIAC GCDA
Responsibilities
Investigate SIEM events and own incident response from triage to resolution, Analyze phishing activity and suspicious domains/IPs, Author reliable detections for defined behaviors, Tune routine rules to reduce false positives, Build customer-specific detections, Audit customer logging coverage
Seniority
Mid-level (3+ years experience)
