Job Description

n

There are multiple Security Detection and Response Analyst roles (Level 1 and Level 2) available with a large financial services organisation.

n

These roles have onsite requirement for 4 days.

Responsibilities: n

n
- Threat Detection & Engineering: Build, tune, and optimize high-quality detection logic mapped to the MITRE ATT&CK; framework to maximize coverage and minimize false positives.
n

nn
- Incident Investigation & Response: Analyze logs and telemetry to determine attack scope and root causes, while executing containment, isolation, and remediation during active security events.
n

nn
- Automation & Metrics Optimization: Maintain and improve SOAR workflows, automated playbooks, and AI enhancements to reduce manual effort and measurably improve MTTR and signal-to-noise ratios.
n

nn
- Documentation & Stakeholder Communication: Document security incident findings, construct timelines, deliver clear updates to stakeholders, and conduct post-incident reviews to capture lessons learned.
n

nn




- Continuous Improvement & Mentorship: Identify monitoring gaps to drive operational maturity, integrate partner use cases, and guide junior team members toward their career development goals.
n

Requirements: nn
- Build, tune, and optimize high-quality detection logic mapped to the MITRE ATT&CK; framework to maximize coverage and minimize false positives.
n

nn
- Analyze logs and telemetry to determine attack scope and root causes, while executing containment, isolation, and remediation during active security events.
n

nn
- Maintain and improve SOAR workflows, automated playbooks, and AI enhancements to reduce manual effort and measurably improve MTTR and signal-to-noise ratios.
n

nn
- Document security incident findings, construct timelines, deliver clear updates to stakeholders, and conduct post-incident reviews to capture lessons learned.
n

n

#J-18808-Ljbffr

📌 Security Detection & Response Analyst roles (Sydney)
🏢 Morgan Mckinley
📍 Sydney