Cybersecurity Analyst, Remote

Our team is growing and we are hiring a Cybersecurity Analyst, Remote. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. The company is based in Melbourne, Australia. The team is distributed across several countries. Employment is through our payroll partner in Germany. Salary is paid monthly in euros. You will need some overlap with Australian Eastern time in the mornings. We use Slack, Notion and Google Meet. Cameras on for team calls.

Main duties

• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Check threat intelligence feeds and IOCs against our environment.
• Document incidents with timeline, impact and root cause.
• Write and update SOC runbooks and playbooks.
• Tune noisy detection rules with the security engineering team.
• Help with user access reviews and offboarding audits.

What we're looking for

• Basic scripting in PowerShell or Python.
• Familiarity with the MITRE ATT&CK framework.
• Working knowledge of SIEM and EDR tools.

Pluses

• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• KQL or SPL query writing.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Why work with us

• Public holidays observed per your country.
• Monthly internet allowance.
• Wellness allowance.
• Stock options.
• Annual learning budget.
• Paid parental leave.

Company overview

Our lab is a back room full of test hardware, old routers and a rack of virtual machines. Founded in 2023, we now have 32 employees.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Melbourne Defense.