Security Operations Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst based in Australia. We are looking for a hands-on Security Operations Analyst to join a globally distributed cybersecurity team dedicated to protecting businesses against increasingly sophisticated cyber threats. In this role, you will investigate active intrusions, analyse endpoint telemetry and forensic evidence, and help detect, contain, and remediate malicious activity. You will work with advanced EDR and SIEM technologies, contribute to threat detection improvements, and support incident response initiatives. Collaborating with Security Operations, Product, and Engineering teams, you will help strengthen security capabilities and improve customer protection. This is an opportunity to work on real-world cyber incidents, develop your technical expertise, and make a meaningful impact in a remote-first environment. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 Accountabilities: Monitor, triage, investigate, and respond to security alerts generated by the cybersecurity platform, identifying threats and coordinating appropriate remediation. Analyse EDR/SIEM telemetry, system logs, and forensic artifacts to determine attack root causes and understand the full scope of security incidents. Perform dynamic malware analysis when required to identify malicious behaviour, extract indicators of compromise, and assess suspicious files. Investigate attacker activity across Windows, Linux, and macOS environments, identifying techniques such as credential theft, lateral movement, persistence, and data exfiltration. Analyse suspicious activity within Microsoft 365 and Google Workspace environments, providing actionable recommendations to secure compromised accounts and tenants. Develop, refine, and optimise detection capabilities by creating and tuning security signals, improving alert quality, and maintaining efficient investigation workflows. Support customer success by assisting security support teams with escalations and technical questions relating to threats and security operations. Collaborate with Product and Engineering teams to improve security products, detection mechanisms, and human-led, AI-assisted security workflows. Continuously develop technical knowledge through real-world investigations, professional training, threat research, and the responsible use of AI tools to improve analytical efficiency. Contribute to the wider cybersecurity community by sharing research, insights, and technical expertise through publications, webinars, blogs, and industry events. Requirements: At least 2 years of professional experience in Security Operations, Incident Response, Managed Detection and Response (MDR), or Digital Forensics. Practical knowledge of at least one major operating system: Windows, Linux, or macOS, including its attack surfaces, malware behaviour, and common threat actor techniques. Understanding of system administration concepts and how attackers exploit them, including Active Directory, PowerShell, Group Policy, and local account management. Familiarity with the MITRE ATT&CK framework and common adversary tactics, including credential dumping, lateral movement, persistence, and data exfiltration. Good understanding of networking fundamentals, including ports, protocols, NAT, public and private IP addressing, and VLANs. Strong investigative and analytical skills, with a genuine interest in digital forensics, analysing system logs, processes, and artifacts to uncover malicious activity. Ability to communicate technical findings clearly and translate complex security issues into practical recommendations for different audiences. Strong written and verbal communication skills, combined with curiosity, initiative, and a commitment to continuous professional development. Experience using AI tools to support security research and daily analysis, with the ability to critically validate outputs before taking action. A collaborative mindset, resilience under pressure, and the ability to take ownership of investigations and deliver effective outcomes. Willingness to work Monday to Friday, from 8:00 AM to 4:00 PM Perth time (AWST). Candidates based elsewhere in Australia must be able to accommodate these working hours in their local time zone. Benefits: Fully remote working arrangement from anywhere in Australia. Competitive annual base salary ranging from AUD 110,000 to AUD 140,000 , plus performance-based bonus and equity opportunities. Stock options available to all full-time employees. AUD 800 reimbursement towards setting up your home office when joining. Monthly AUD 185 digital allowance to help cover personal phone and internet expenses. Additional monthly AUD 40 home-office technology stipend for equipment upgrades and replacements. 12 weeks of paid parental leave for both primary and secondary carers. Subsidised private health insurance through a preferred provider. Access to the BetterUp platform for personal development, professional coaching, and career growth. Opportunities for paid training and continuous technical development. At least one annual trip to the United States for the company-wide Summer Summit, alongside additional local events in Australia. A supportive, inclusive, and collaborative international team environment. Opportunities to contribute to cutting-edge cybersecurity research, product innovation, and industry knowledge-sharing initiatives.