Duco is an evolving force in Australia’s tech landscape, specialising in Managed IT Services and Enterprise Solutions. Driven by a commitment to innovation and excellence, we’re more than just a business. We’re a team that believes in the power of technology to transform and empower. Our mission is to deliver top-tier, forward-thinking solutions that help our clients thrive on a global scale.

We are seeking a hands-on and experienced Cyber Security Analyst to join our Cyber Security team, reporting directly to the Chief Information Security Officer (CISO). This role offers the opportunity to support and strengthen the cyber security posture of multiple clients across a variety of industries, working across security operations, vulnerability management, security platforms, governance, and incident response within complex operational environments.

This position is ideal for a security qualified who enjoys working across a broad range of cyber security disciplines, collaborating with business stakeholders, third-party security providers, and executive leadership to ensure effective cyber risk management and continuous improvement.

Role Purpose

The Cyber Security Analyst is responsible for supporting the delivery of cyber security services across the organisation, working closely with the CISO to maintain and enhance security controls, coordinate vulnerability remediation activities, administer key security platforms, support incident response, and provide meaningful reporting to senior leadership. The role contributes to both operational cyber security activities and broader governance initiatives to ensure the organisation remains resilient against evolving threats.

Responsibilities

Support the CISO with technical investigations,



incident response activities, root cause analysis, and cyber security initiatives.

Work closely with Arctic Wolf to monitor, investigate, and respond to cyber security alerts and incidents.

Manage cyber-related ITSM ticket triage, investigation, remediation, and escalation activities.

Participate in security incident reviews and lessons learned exercises.

Coordinate responses to emerging vulnerabilities, threat intelligence notifications, and critical security risks.

Monitor vulnerability and patch compliance across the technology environment.

Review critical CVEs and coordinate remediation activities with relevant stakeholders.

Produce regular reporting on compliance rates, risk ratings, remediation progress, and outstanding exposures.

Administer and support Microsoft 365 Security, Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID, Secure Score, and Conditional Access.

Manage Delinea Secret Server, password management, and privileged access management (PAM) capabilities.

Administer Mimecast security services, phishing simulations, and cyber awareness initiatives.

Support Fortinet security platforms, including FortiGate, FortiManager, FortiAnalyzer, firewall reviews, and policy administration.

Assist with Arctic Wolf MDR, SIEM investigations, SOC engagement, and threat hunting activities.





Support Veeam Backup & Replication, recovery validation, and cyber recovery readiness assessments.

Maintain cyber security dashboards, executive reports, procedures, standards, and knowledge base documentation.

Assist with audits, evidence collection, governance reporting, and stakeholder communications.

Support Incident, Problem, Change, Configuration, and CMDB management processes.

What Your Day-to-Day Will Look Like

Investigating cyber security events, alerts, and incidents while working closely with internal and external security teams.

Coordinating remediation of vulnerabilities, security risks, and patching activities.

Monitoring security platforms and ensuring cyber controls are operating effectively.

Managing identity, access, and privileged access security controls.

Reviewing threat intelligence and assessing potential impacts to the organisation.

Preparing executive dashboards, governance reports, and security metrics.

Supporting audits, cyber governance activities, and compliance initiatives.

Driving continuous improvement across cyber security processes, controls, and technologies.

Preferred Experience

+5 years’ experience in cyber security, security operations, cyber governance, or related disciplines.

Strong experience with Microsoft 365 security technologies and administration.

Hands-on experience with Microsoft Defender, Entra ID, Secure Score, and Conditional Access.

Experience managing vulnerability remediation programs and engaging with SIEM and SOC providers.

Knowledge of Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Incident Response, and Sec

📌 CyberSecurity Analyst (Adelaide)
🏢 Duco
📍 Adelaide