Job Description
If you enjoy following an investigation through and working out what actually happened, this is worth a look.
A large global organisation is hiring two Security Operations Analysts in Sydney. You’ll join a specialist team investigating incidents across cloud platforms and SaaS applications, with colleagues across APAC, Europe and the US.
You’ll own investigations from the initial alert through to closure, using logs to establish what happened, assess the impact and determine what needs to happen next. You’ll work with other security teams when their expertise is needed, and help improve detections based on what you find.
You’re probably working in a SOC or incident response team already. Your current title matters less than the investigations you’ve personally handled. You’ll need experience investigating incidents in at least one of Azure, AWS or GCP, alongside sound technical foundations and confidence analysing logs in a SIEM.
You don’t need to know every platform or have an answer for everything. What matters is how you approach an unfamiliar problem, which questions you ask and how you use evidence to reach a conclusion.
There’s room for someone building their incident response career, as well as a more experienced analyst who enjoys the investigative work. You’ll have access to technical training and opportunities to explore other security disciplines within the organisation over time.
The working pattern needs to suit you: four fixed working days each week, including one weekend day, with longer shifts and three days off.
russell@theonset.com.au / 0438984265
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.