AddressAs a member of the Security Operations Centre team in Brisbane, you will be focused on working with the team to perform ongoing operations, administration and development of security systems. You will continuously work towards high confidence and high-fidelity detection rules leveraging anomalous or suspicious events in collaboration with other SOC team members.
Your main responsibilities will include but are not limited to:
- Perform SIEM-based event analysis and incident triage recognising potential, successful, and unsuccessful intrusion attempts and compromises through correlation and analysis of relevant event detail and summary information
- Conduct proactive monitoring, investigation, and escalation of security incidents
- Investigate malicious phishing e-mails, domains and IP’s using open source and sector intelligence
- Assist with implementation services for customer and internal security projects, including all facets of customer liaison, and problem resolution to ensure successful completion
- Provide operational support and project support to clients, taking the initiative to drive improvement and deliver successful outcomes for customers
We are looking for a well-organised professional, with initiative and enthusiasm. You will have 1-2 years of relevant experience and will have a good mix of the following skills, knowledge & experience:
- Experience with SIEM, XDR and EDR technologies
- Experience with Microsoft Security Platforms
- Experience working with Linux and/or Unix based systems
- Experience with Vulnerability Management technologies such as Rapid7, Tenable, Qualys etc.
- Understanding of the MITRE ATT&CK Framework and Cyber Kill-chain
- Ability to document and explain technical details clearly and concisely to both technical and non-technical audiences
- Familiar with the cloud computing, networking, firewall and ITSM concepts
Note: The role is subject to state and federal police background checks.
