Security AnalystJust posted! in Sydney

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role:

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

Your skills:

• Strong Intrusion Analysis background. You must be able to identify and interpret web and application logs from a security perspective.
• Strong Splunk skill set. You will leverage Splunk to analyze logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
• Knowledgeable of current exploits. You must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems
• Comfortable with scripting languages and regular expressions
• Strong knowledge common network protocols, especially HTTP, DNS, TLS
• Working knowledge of enterprise Client / Server architecture

Skills specific to your role:

• Understanding of how web-applications work under the hood and related protocols such as HTTP/HTTPS
• Common attack vectors against web-applications (OWASP top 10 and beyond)
• How to identify attacks/malicious activities through analysis of logs generated by applications, authentication, end-point, security appliances, etc

Your Experience:

• Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
• An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
• Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch
• Broad awareness of information security operations and/or enterprise information technology

Your working hours will be 40 hours over 4-days per week -Wednesday to Saturday.They are a front-line team that handles active security events and current threats. On call and after hours work can be expected, although they rotate to approximately one week every 2 months.

#J-18808-Ljbffr