Information Security Intelligence Analyst

Hello. We're Virgin Australia. We're the airline that's always done things a little different. Our way. The Virgin way. We're on a mission to make flying better than 'nice'. And to do that, it takes a team of talented people who are passionate about customer experience, doing the right thing always, with a focus on safety - in the air, on the ground and in our workplaces. A team who values real diversity and inclusion, in a big brand with big ambitions.
What you'll be doing
You are a seasoned threat Intelligence Analyst who is ready to contribute to an exciting, intelligence-led security transformation. You'd be joining the Information Security function at Virgin Australia. It has a holistic capability, incorporating security operations capability, risk management and business outreach. Security intelligence sits at the intersection of the key functional areas of detection engineering, threat intelligence and incident response.

• Develop and operate a Security Intelligence process which works at the intersection of detection engineering, threat intelligence and incident response.
• Track the evolving tradecraft, tactics, techniques, and procedures of threat actors targeting the aviation sector to aid threat-informed risk management.
• Craft and execute hypotheses for threat hunting and adversarial assessment based on incoming intelligence.
• Communicate the evolving threat picture to the key stakeholders by crafting tailored intelligence dispatches.
• Constantly assess the efficacy of security operations against common threat analytic frameworks like MITRE ATT&CK and recommend ways to address the gaps.
• Implement the tooling for gathering and analysing threat intelligence and develop the intelligence products to be consumed by the strategic and tactical audiences.
• Influence detection engineering by improving observability on log sources and defining use cases which bolster the Security Intelligence process.
• Integrate threat intelligence into Virgin Australia's incident response and crisis management frameworks.
• Provide intelligence support for incidents and escalations and lead security response if the situation necessitates.
• Plan and conduct tabletop exercises and revise the playbooks for incident response.
• Develop and maintain external intelligence relationships with partner organisations.
• Deputise for the Information Security Operations Manager and be on-call if needed.

You'll be great in this role if you…

• Background in one of the following areas: threat intelligence, security operations and incident response.
• Understand the modern security operations stack.
• Demonstrated experience in operating technologies like Security Information & Event Management and Endpoint Detection & Response.
• A conceptual understanding of analytic frameworks like MITRE ATT&CK, CREST CBEST and Diamond Model.
• Possess mature stakeholder management skills and demonstrate the emotional intelligence to deal with complexity and uncertainty.
• Are comfortable with the tempo of security operations and occasionally being on-call.

We're committed to looking after you, with some of the best benefits and conditions in the industry - including (but not limited to):

• Discounted flights for you and your loved ones (including $1000 worth of travel credits per year)
• A flexible, hybrid work style. Work from home or the office, adapt your location to suit your style and needs
• One of Brisbane's most admired head office locations, with South Bank train station, a supermarket, pharmacy, and lunch options downstairs plus a 5-minute walk to the Busway, a rooftop restaurant and onsite gym (with a low membership fee) and South Bank Parklands just across the road
• Discounts on travel insurance, lounge membership, car hire, accommodation, and experiences worldwide
• Cheaper hospitality, retail, technology, beauty and wellness services
• Free counselling and access to a wellbeing app to support your physical, mental, social and financial health
• 'Dress for Your Day' - enjoy the freedom to wear whatever makes you feel great for the type of work you do and the day you have ahead of you.

When everyone is included, everyone wins
We're all individuals. And we love that. That's why we encourage applications from Indigenous Australians, people with disability, those from diverse cultural backgrounds, our friends in the LGBTQI+ community, and anyone else who wants to join our family.
Ready to apply?
We're ready to hear from you. Apply now.