About EVT:At EVT we believe in changing the game.
Why?
Because no one wants ordinary.
If you're seeking to be part of the kind of wow-factor moments you can help shape, then you've come to the right place.
As market-leading experience creators, we bring to life some of the best-known brands and properties in entertainment, ventures, and travel.
Our portfolio includes over 140 entertainment experiences like Event Cinemas and Moonlight Cinemas, 150 award-winning restaurants and bars, and 80+ hotels, including QT, Rydges, Atura, LyLo, and Thredbo.
Our ventures include a ~$2.3B property portfolio and hotel management, just to name a few.
About the Role
The Information Security Analyst will strengthen EVT's in-house Security Operations capability, working alongside a small and capable team to detect, investigate, and respond to threats across a complex, multi-divisional setting.
This is a hands‐on, growth‐oriented role embedded in EVT's hybrid SOC model.
EVT partners with CrowdStrike's Falcon Complete service for 24/7 managed detection and response, and this role sits within the internal team that manages, evolves, and ultimately brings more capability in‐house.
You'll triage and investigate alerts, contribute to detection engineering, support incident response playbook development, and play an active part in shaping how EVT's SOC matures over time.
You'll report directly to the Head of Information Security.
You'll work closely with a team of analysts and contractors spread across Sydney, with a geographically dispersed workforce that values people who build relationships proactively.
Key Responsibilities
Security Monitoring and Incident Response
Triage and investigate alerts surfaced through CrowdStrike Falcon (EDR/SIEM) and other detection tooling, determining scope, severity, and appropriate response.
Support and participate in incident response activities, including containment, eradication, and post‐incident review.
Contribute to the development and ongoing evolution of EVT's IR playbooks,



ensuring they reflect current threat landscape and EVT's environment.
Coordinate with CrowdStrike's Falcon Complete managed service as part of EVT's hybrid SOC model.
Participate in the on‐call roster (approximately one week per month, with compensation provided).
Entra & AD Detection Engineering and Threat Analysis
Go beyond the alert queue – proactively investigate activity across logs, endpoints, cloud, and network telemetry to identify threats that may not surface through automated detections.
Contribute to detection development and tuning within CrowdStrike's next‐gen SIEM, improving fidelity and reducing noise over time.
Support threat hunting activities, building hypotheses from threat intelligence and hunting across EVT's environment.
Stay current on emerging threats, TTPs, and tooling, particularly where they intersect with EVT's tech stack and industry.
Tool Management and Platform Operations
Operate and maintain EVT's security tooling, with a primary focus on CrowdStrike Falcon (EDR, next‐gen SIEM), Zscaler, and Microsoft security products across Entra ID and Exchange Online.
Support the management of email security controls and rules within Exchange Online.
Work alongside EVT's networking team on security‐relevant matters involving Fortinet and Cisco infrastructure.
Support the management and operation of EVT's log pipeline and data routing platform, ensuring security telemetry is correctly shaped and delivered to downstream detection tools.
Contribute to the ongoing development of EVT's SOAR capability and automation pipelines as the function matures.
Onboarding, Collaboration, and Knowledge Management




Build strong working relationships across a geographically dispersed team, proactively reaching out to colleagues in Sydney, and beyond.
Shadow team members during onboarding to build contextual knowledge of EVT's environment, tools, and deployments before taking on independent responsibilities.
Maintain clear documentation of processes, investigations, and playbooks to support team continuity and knowledge sharing.
Collaborate with IT and the wider business on security matters, bringing a clear and approachable communication style to technical topics.
Supporting the Information Security Team
Contribute to continuous improvement initiatives across the security function.
Support other team members and the Head of Information Security as directed.
Maintain a learning mindset – EVT actively supports professional development, including access to CrowdStrike certifications and an ongoing training.
What You'll Bring
Demonstrated experience in a cyber security operations role, with hands‐on exposure to alert triage, incident response, and threat investigation.
Familiarity with SIEM and EDR platforms – CrowdStrike experience highly regarded.
Solid understanding of networking fundamentals – TCP/IP, DNS, HTTP, common protocols – as the foundation for effective threat analysis.
Experience working in Microsoft environments, including Entra ID (Azure AD), Exchange Online, and M365 security tooling.
Strong communication skills – able to explain technical findings clearly to both technical colleagues and business stakeholders.
Proactive, inquisitive mindset – someone who wants to understand how things work, not just respond to what's in front of them.
Perks from Day One
50% off dining and stays across EVT hotels – QT, Rydges, Atura, LyLo and more.
$2 movie tickets + discounts on Gold Class, Moonlight Cinema and Candy Bar.
Seasonal perks at Thredbo.
Rapid career growth across our hotel & entertainment network.
Paid parental leave; community & volunteering opportunities.
#J-*****-Ljbffr

📌 Information Security Analyst - Evt Head Office (New South Wales)
🏢 EVT - Entertainment | Ventures | Travel
📍 New South Wales