Duco is an evolving force in Australia’s tech landscape, specialising in Managed IT Services and Enterprise Solutions. Driven by a commitment to innovation and excellence, we’re more than just a business. We’re a team that believes in the power of technology to transform and empower. Our mission is to deliver top-tier, forward-thinking solutions that help our clients thrive on a global scale.

We are seeking a hands-on and experienced Cyber Security Analyst to join our Cyber Security team, reporting directly to the Chief Information Security Officer (CISO). This role offers the chance to support and strengthen the cyber security posture of multiple clients across a variety of industries, working across security operations, vulnerability management, security platforms, governance, and incident response within complex operational environments.

This position is ideal for a security qualified who enjoys working across a broad range of cyber security disciplines, collaborating with business stakeholders, third-party security providers, and executive leadership to ensure effective cyber risk management and continuous improvement.

Role Purpose The Cyber Security Analyst is responsible for supporting the delivery of cyber security services across the organisation, working closely with the CISO to maintain and enhance security controls, coordinate vulnerability remediation activities, administer key security platforms, support incident response, and provide meaningful reporting to senior leadership. The role contributes to both operational cyber security activities and broader governance initiatives to ensure the organisation remains resilient against evolving threats.

Responsibilities

- Support the CISO with technical investigations, incident response activities, root cause analysis, and cyber security initiatives.
- Work closely with Arctic Wolf to monitor, investigate, and respond to cyber security alerts and incidents.
- Manage cyber-related ITSM ticket triage, investigation, remediation, and escalation activities.
- Participate in security incident reviews and lessons learned exercises.
- Coordinate responses to emerging vulnerabilities, threat intelligence notifications, and critical security risks.
- Monitor vulnerability and patch compliance across the technology environment.




- Review critical CVEs and coordinate remediation activities with relevant stakeholders.
- Produce regular reporting on compliance rates, risk ratings, remediation progress, and outstanding exposures.
- Administer and support Microsoft 365 Security, Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID, Secure Score, and Conditional Access.
- Manage Delinea Secret Server, password management, and privileged access management (PAM) capabilities.
- Administer Mimecast security services, phishing simulations, and cyber awareness initiatives.
- Support Fortinet security platforms, including FortiGate, FortiManager, FortiAnalyzer, firewall reviews, and policy administration.
- Assist with Arctic Wolf MDR, SIEM investigations, SOC engagement, and threat hunting activities.
- Support Veeam Backup & Replication, recovery validation, and cyber recovery readiness assessments.
- Maintain cyber security dashboards, executive reports, procedures, standards, and knowledge base documentation.
- Assist with audits, evidence collection, governance reporting, and stakeholder communications.
- Support Incident, Problem, Change, Configuration, and CMDB management processes.

What Your Day-to-Day Will Look Like

- Investigating cyber security events, alerts, and incidents while working closely with internal and external security teams.
- Coordinating remediation of vulnerabilities, security risks, and patching activities.
- Monitoring security platforms and ensuring cyber controls are operating effectively.
- Managing identity, access, and privileged access security controls.
- Reviewing threat intelligence and assessing potential impacts to the organisation.
- Preparing executive dashboards, governance reports, and security metrics.
- Supporting audits, cyber governance activities, and compliance initiatives.
- Driving continuous improvement across cyber security processes, controls, and technologies.

Preferred Experience

- +5 years' experience in cyber security, security operations, cyber governance,



or related disciplines.
- Strong experience with Microsoft 365 security technologies and administration.
- Hands-on experience with Microsoft Defender, Entra ID, Secure Score, and Conditional Access.
- Experience managing vulnerability remediation programs and engaging with SIEM and SOC providers.
- Knowledge of Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Incident Response, and Security Monitoring.
- Experience preparing technical documentation and executive-level reporting.
- Robust communication, stakeholder engagement, and documentation skills.
- Experience working within ITIL-based service management environments.
- Experience with Fortinet, Delinea, Mimecast, Arctic Wolf, and Veeam technologies highly regarded.
- Exposure to critical infrastructure, mining, resources, industrial, or Operational Technology (OT) environments is advantageous.
- Familiarity with CIS Controls, NIST Cyber Security Framework, and Zero Trust principles.
- Knowledge of AI security governance and cyber security best practices highly regarded.

Preferred Qualifications

- Relevant degree, diploma, or equivalent experience in Cyber Security, Information Technology, or a related discipline.
- Microsoft certifications including SC-200, SC-300, or SC-100 highly regarded.
- Industry certifications such as CISSP, Security+, GSEC, Fortinet NSE/FCA/FCP, or ITIL Foundation are desirable.

What Success Looks Like in this role

- Timely investigation, containment, and resolution of cyber security incidents and issues.
- Reduction in critical vulnerabilities and improved remediation outcomes.
- Delivery of accurate, timely, and insightful executive reporting.
- Strong collaboration with Arctic Wolf SOC, SIEM, and managed security services.
- Effective privileged access governance and security oversight.
- Ongoing enhancement of cyber security controls, governance processes, and operational maturity.

Duco is an equal opportunity employer committed to fostering a diverse and inclusive workplace. We encourage individuals from all backgrounds to apply.

We are passionate about the growth and development of our people, empowering them to reach their full potential. We move forward by supporting the growth and success of those we work with.

📌 Cyber Security Consultant (Adelaide)
🏢 Duco
📍 Adelaide