This is an opportunity for someone with experience in cyber security or security operations who wants to develop their technical skills in a hands-on environment.
Working across security monitoring, threat detection and incident response, you'll play an important role in identifying potential threats, investigating suspicious activity and helping strengthen the organisation's overall security posture.
You'll work with Microsoft security technologies, including Defender XDR and Sentinel, while contributing to the development of security processes and controls. The team is also embracing AI-assisted security capabilities, making this a great opportunity for someone interested in how emerging technologies can improve threat detection and response.
They're looking for someone naturally curious, proactive and passionate about cyber security, who enjoys investigating how attacks happen and continually building their technical knowledge.
Key Responsibilities
- Monitor and investigate security alerts, events and potential threats using Microsoft Defender XDR and other security platforms.
- Analyse logs, network activity and security data to identify suspicious behaviour and emerging threats.
- Use KQL to conduct investigations, advanced hunting and threat analysis.
- Leverage AI-assisted tools to support alert triage, investigation, incident summarisation and threat enrichment, applying sound judgement to validate results.
- Assist with security incident response, including investigation, containment and remediation activities.
- Work alongside internal technology teams to coordinate incident response and recovery.
- Manage and resolve security-related service requests and elevate risks where appropriate.
- Identify opportunities to improve existing security controls, processes and procedures.
- Develop and maintain security documentation, operational reporting and investigation records.
- Support effective handovers across a follow-the-sun security operations model.
- Keep up to date with evolving cyber threats, attack techniques and security technologies, sharing knowledge and recommendations with the wider team.
Skills & Experience
- Experience in a Security Operations Centre (SOC), cyber security, incident response or a similar technical role.
- Practical experience with Microsoft Defender XDR, including Endpoint, Identity and Cloud Apps.
- Exposure to Microsoft Sentinel and SIEM/XDR technologies.
- Working knowledge of Kusto Query Language (KQL) and advanced threat hunting.
- Understanding of incident response processes and frameworks such as MITRE ATT&CK.
- Knowledge of Windows environments, Active Directory/Entra ID, networking fundamentals and cloud security.
- Exposure to scripting or automation using PowerShell or Python would be advantageous.
- An understanding of how AI and generative AI tools can be applied to security operations, including alert investigation, query development and incident analysis.
- Strong problem-solving skills and the ability to investigate issues, make informed decisions and recognise when escalation is required.
- Excellent communication skills, with the ability to document findings and work collaboratively with technical stakeholders.
#J-18808-Ljbffr
Cyber Security Analyst in Sydney employer: Motion Recruitment
Join a dynamic team in Sydney where creativity meets strategy, and your ideas can truly shine. As a Social Creative Designer, you'll enjoy a collaborative work culture that values innovation and encourages professional growth, all while working on exciting campaigns for diverse clients. With a hybrid working model and competitive salary, this role offers the perfect balance of flexibility and opportunity to make a meaningful impact in the world of social media.