Senior Cyber Security Analyst

We operate two 24/7 network operations centres and a security operations centre, staffed in three shifts. Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer.

About the role:

We are backfilling a position after an internal move. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Remote position. Most of the team is in Sydney, but nobody is required to come in.

Job duties:

• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Hand off open cases at shift change with clear notes.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Check threat intelligence feeds and IOCs against our environment.

Qualifications:

• 7+ years in an SOC, security analyst or IT security role.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Must be able to pass a background check.
• Basic scripting in PowerShell or Python.

What you get:

• Superannuation on top of salary.
• Study leave.
• 17.5% leave loading.
• Additional leave days.
• Novated leasing.
• Paid parental leave.

Applications close when we find the right person, so get in early.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Murray Data Systems.