At a Glance
- Tasks: Monitor and respond to security events in a dynamic, fast-paced environment.
- Company: Join Triskele Labs, a leading Australian cyber security firm with a strong team culture.
- Benefits: Gain certifications, hands-on experience, and work with top professionals in the field.
- Other info: This is a rotating shift role, perfect for those eager to grow in security.
- Why this job: Kickstart your career in cyber security and make a real impact on client safety.
- Qualifications: Curiosity, strong analytical skills, and a passion for learning are key.
The predicted salary is between 62100 - 75900 $ per year.
About the company
Triskele Labs is one of Australia's leading sovereign cyber security firms, delivering Managed Detection & Response (MDR), Digital Forensics & Incident Response (DFIR), Offensive Security, and Governance, Risk & Compliance (GRC) services to regulated enterprises, government, and the higher education sector. Built over more than a decade, founder-led and independently owned, we partner with clients operating under some of Australia's most demanding regulatory regimes. Our Security Operations Centre runs 24x7x365 and remains completely onshore in Melbourne, and we are the largest CREST Registered Penetration Testing company in the city.
About the role
We are hiring Level 1 Security Analysts into our Melbourne Security Operations Centre. This is the front line of our MDR service: the first set of eyes on every alert raised across our clients' environments, at every hour of the day and night. You will work a rotating roster as part of a team that monitors, triages and responds to security events across a broad client base spanning financial services, government, health and higher education. You will learn the craft properly: real telemetry, real incidents, real clients, with senior analysts, detection engineers, threat hunters and a genuine DFIR team sitting alongside you. This is a deliberate entry point into defensive security. We hire for aptitude, curiosity and work ethic rather than years on a résumé, and we fund the certifications that take you from L1 to a credible security professional. What we ask in return is that you take the roster seriously, care about the quality of what you hand to the next shift, and want to get better every month. This is not a Monday-to-Friday role, and it is not a remote role. It is not a detection engineering, penetration testing or GRC role. Analysts who join us wanting to be somewhere else within six months tend not to enjoy it, analysts who want to become genuinely good at investigation and response tend to thrive.
Key Responsibilities
- Monitoring and triage
- Monitor alert queues and triage security events across client environments, identifying potential security incidents and escalating promptly where required.
- Perform incident prioritisation and triage to determine the severity, scope and likely impact of security issues.
- Escalate alerts requiring deeper investigation to the appropriate tier within the SOC, with clear, complete handover notes.
- Perform efficient triage and ticketing of reported phishing emails, taking timely and appropriate action.
- Conduct dark web monitoring for client exposure and indicators of compromise using established processes.
- Respond to hotline calls promptly and professionally so that no client call is missed.
- Service operations
- Respond to service desk tickets, resolving them or escalating to the appropriate team as required.
- Perform daily health checks across client environments to identify and address potential issues before they affect monitoring coverage.
- Attend and lead shift handover meetings, completing the documentation needed for a clean transition between shifts.
- Create change request tickets for internal and client queries and see them through to resolution.
- Manage and configure security monitoring tooling within the change control process, escalating configuration changes as required.
- Work to individual and tier KPIs aligned to our service commitments.
- Reporting and client support
- Retrieve, assist in producing and issue scheduled weekly and monthly client reports following existing processes.
- Assist in gathering evidence for monthly reporting and client review meetings, and address client queries arising from them.
- Learning and improvement
- Proactively identify opportunities to tune event detection and reduce false positives, passing what you see to our Detection Engineering team with the context they need to act on it.
- Actively identify improvements to internal processes and Standard Operating Procedures, particularly around triage and analysis.
- Continuously develop your skills through formal training and certification, including completing at least one Blue Team Labs Online challenge per month.
- Work collaboratively with the wider SOC and with our Platform Engineering, DFIR, Security Engineering and Service Delivery teams.
About you
- Analytical Thinking: Strong analytical skills with the ability to quickly assess and prioritise security events and incidents. Capable of analysing logs, identifying anomalies, and recognising potential security threats.
- Communication Skills: Excellent written and verbal communication skills. Ability to convey complex technical information to both technical and non-technical stakeholders effectively.
- Team Player: Capable of working collaboratively in a team-oriented environment.
Level 1 Security Analyst employer: Triskele Labs
Triskele Labs is an exceptional employer for Digital Forensics Analysts, offering a collaborative and growth-oriented culture that values each team member's contributions. With a commitment to ongoing training and professional development, employees have access to unique benefits such as salary packaging and a hybrid working environment, all while making a meaningful impact in the cybersecurity landscape across Australia.
