Cloud Security Analyst

Job Description

If you enjoy following an investigation through and working out what actually happened, this is worth a look.

A large global organisation is hiring two Security Operations Analysts in Sydney. You’ll join a specialist team investigating incidents across cloud platforms and SaaS applications, with colleagues across APAC, Europe and the US.

You’ll own investigations from the initial alert through to closure, using logs to establish what happened, assess the impact and determine what needs to happen next. You’ll work with other security teams when their expertise is needed, and help improve detections based on what you find.

You’re probably working in a SOC or incident response team already. Your current title matters less than the investigations you’ve personally handled. You’ll need experience investigating incidents in at least one of Azure, AWS or GCP, alongside sound technical foundations and confidence analysing logs in a SIEM.

You don’t need to know every platform or have an answer for everything. What matters is how you approach an unfamiliar problem, which questions you ask and how you use evidence to reach a conclusion.

There’s room for someone building their incident response career, as well as a more experienced analyst who enjoys the investigative work. You’ll have access to technical training and opportunities to explore other security disciplines within the organisation over time.

The working pattern needs to suit you: four fixed working days each week, including one weekend day, with longer shifts and three days off.

russell@theonset.com.au / 0438984265