At a Glance
- Tasks: Investigate and respond to cloud security incidents across Azure, AWS, GCP, and SaaS applications.
- Company: Join a leading international financial services organisation with a global presence.
- Benefits: Enjoy a 4-day work week, competitive salary, and opportunities for professional growth.
- Other info: Work in a dynamic environment with a focus on innovation and teamwork.
- Why this job: Make a real impact in cybersecurity while collaborating with a diverse global team.
- Qualifications: 2-5 years of experience in cloud security operations and strong analytical skills.
The predicted salary is between 81000 - 99000 $ per year.
An international financial services organisation is seeking a skilled and motivated Cloud SOC Incident Analyst with between 2 and 5 years of experience within a Cloud Security Operations Centre environment. You will focus on identifying, analysing, mitigating and responding to security threats and alerts across Azure, AWS, GCP and SaaS applications.
What you will do:
- Use your cloud security knowledge, skills and investigative mindset to investigate and respond to incidents and alerts. This could include anything from brute-force attempts, suspicious AI utilisation, data exfiltration and exploitation of CVEs, to anything in between.
- Identify unfamiliar data in the midst of an incident and assess its relevance.
- Use Splunk and Log Analytics to view logs related to Azure, AWS, GCP and SaaS applications.
- Improve our existing alerting, including tuning existing detections and developing new detections.
- Communicate clearly, concisely and inclusively, both in writing and verbally, with technical and non-technical audiences, including colleagues, peers and stakeholders.
- Work alongside a global team, with colleagues in the USA, Europe and the Asia-Pacific region, placing emphasis on collaboration and the sharing of ideas and methodologies.
Your Experience:
- Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments.
- An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure.
- Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch.
- Broad awareness of information security operations and/or enterprise information technology.
The working hours are 9:00AM to 7:30PM AEST, 4 days (38 hours) per week on one of two shifts, Wednesday to Saturday or Sunday to Wednesday, to align with the nature of the support provided by the team.
Cloud SOC Incident Analyst in Sydney employer: Talent Web Recruitment
As a Relationship Manager (KYC Support) in our dynamic International Banking and Financial Institutions team, you will thrive in a supportive work culture that values collaboration and professional growth. Our commitment to employee development is reflected in tailored training programs and opportunities for advancement within the banking sector, all while working in the vibrant environment of Australia, where you can engage with large Chinese corporate clients and expand your expertise in cross-border banking.
