Security Analyst

6-month contractual role for Sydney location (Hybrid)

Security Analyst
About the OpportunityWe are seeking a highly motivated Security Analyst to join our Information Security team. This role is ideal for a cybersecurity professional with experience in threat detection, incident response, identity security, and vulnerability management. You will play a key role in protecting enterprise systems, investigating security incidents, and supporting ongoing cyber resilience initiatives
Key ResponsibilitiesSecurity Monitoring & Incident Response

• Monitor and investigate security alerts using Microsoft Defender XDR.
• Detect and respond to malware, phishing, credential theft, and suspicious activities.
• Conduct threat hunting using KQL queries and investigate indicators of compromise.
• Support incident containment activities, including endpoint isolation and remediation.
• Improve detection capabilities and reduce false positives through tuning and optimization

Identity & Access Security

• Investigate suspicious authentication activity within Microsoft Entra ID.
• Monitor privileged access, Conditional Access policies, and MFA-related risks.
• Respond to account compromise incidents and enforce security controls.

Data Protection & Insider Threat Monitoring

• Monitor sensitive data access and file activity using Varonis.
• Investigate potential insider threats and unauthorised data transfers.
• Support least-privilege access initiatives and recommend security improvements.

Email Security

• Analyse and respond to phishing reports through Google Admin Console.
• Quarantine malicious emails and block harmful domains.
• Assist with email security configurations including SPF, DKIM, and attachment protection.

Vulnerability Management

• Monitor vulnerabilities across systems, applications, and endpoints.
• Work with technical teams to prioritise and remediate security risks.
• Track remediation activities and report on risk reduction progress.

Reporting & Collaboration

• Document security incidents and investigations through ServiceNow.
• Prepare security reports, dashboards, and executive summaries.
• Collaborate with IT and business stakeholders to strengthen security posture.

What We're Looking For

• Experience in Security Operations, Incident Response, SOC, or Cybersecurity Analyst roles.
• Hands-on experience with Microsoft Defender XDR and security investigations.
• Knowledge of Microsoft Entra ID identity monitoring and access controls.
• Experience with vulnerability management processes and remediation tracking.
• Understanding of cyber threats including phishing, malware, insider threats, and identity attacks.
• Strong analytical, communication, and stakeholder engagement skills.
• Experience using ServiceNow for incident management and reporting.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to Gautam@hays.com.au
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.
#3015992