This Major Federal Agency is looking for multiple Cyber Security Operations Analysts for 12 month contracts with potential extensions.
The role demands technical prowess in cloud security (Azure/AWS), endpoint and network security, threat intelligence, data loss prevention, vulnerability management, and incident response.
Across multiple positions from junior to senior, potential responsibilities include:
- Conduct monitoring, investigation, and mitigation of security incidents within security tools (including Microsoft Defender 365 stack, Azure Security Centre, IntSights, Splunk)
- Analyse security event data and identify suspicious/malicious activity from networks and systems
- Perform incident response activities while under direction
- Develop and manage phishing simulations
- Research new and evolving threats and vulnerabilities to the Agency's threat landscape
- Lead incident response activities including initial and detailed investigation, computer forensics, chain of custody implications
Essential:
- Must hold Australian Citizenship
- Must be willing to obtain a security clearance
- Potential for a requirement to work a rotating roster between 0700 and 1900 AEST
Desirable criteria:
- Demonstrated familiarity with log aggregation and Security Incident and Event Management (SIEM) systems
- Knowledge of the Information Security Manual (ISM) and cyber security concepts.
- Demonstrated working knowledge of Incident Response Frameworks (NIST SP 800- 61 Incident Handling Guide, Mitre Frameworks)
- Formal tertiary qualifications or industry certifications in a cyber security related field (e.g. Azure/AWS, Splunk Certified)
- Sound written and verbal communication skills
- Worked in a Security/Network Operations Center (or similar)
Diversity and inclusion are strongly supported at Peoplebank. People of all nationalities, gender identities, and cultural backgrounds, including Aboriginal and Torres Strait Islander Peoples, are encouraged to apply.
