What You'll Do

- Monitor, triage, investigate and respond to cyber security events, alerts and incidents.

- Perform phishing analysis and response activities, including investigation, remediation and stakeholder communication.

- Support incident response activities across the full incident lifecycle, from detection through to recovery and lessons learned.

- Conduct threat analysis, threat hunting and security monitoring activities to identify and mitigate cyber risks.

- Develop and enhance detection capabilities through rule tuning, process improvement and operational optimisation.

- Contribute to continuous improvement initiatives focused on automation, efficiency, documentation and service maturity.

- Produce operational reports, investigation findings and technical recommendations for stakeholders.

- Collaborate with internal and customer teams to maintain service levels and improve security outcomes.

- Participate in knowledge sharing, mentoring and cross-skilling activities across the wider SOC team.

- Support the ongoing evolution and effectiveness of the Security Operations Centre capability.

About You

You are technically curious and delivery-focused, and you enjoy working through customer security problems. You are comfortable contributing to both hands-on technical work and stakeholder-facing activities, and you can explain security concepts clearly to technical and non-technical audiences. You take direction well, ask good questions, and are motivated to grow into greater ownership over time.

Required Skills And Experience

- Demonstrated experience working within a Security Operations Centre (SOC), Cyber Defence, Incident Response, or Managed Security Services environment.

- Experience investigating and responding to cyber security alerts, incidents, phishing campaigns,



and threat activity.

- Strong understanding of incident response methodologies, threat detection, and cyber security operations.

- Experience using enterprise security monitoring, SIEM, SOAR, EDR, and threat intelligence platforms.

- Strong analytical, investigative, and problem-solving skills, with the ability to assess and prioritise security events.

- Experience preparing technical reports, incident summaries, and recommendations for stakeholders.

- Ability to work effectively within a team setting while managing competing operational priorities.

- Strong written and verbal communication skills, with the ability to engage with both technical and non-technical stakeholders.

- Experience contributing to continuous improvement initiatives, including process optimisation, documentation, automation, and operational uplift.

- Familiarity with cyber security frameworks and best practices, including NIST Incident Response and ITIL Service Management principles.

- Experience operating within service-based environments with defined service levels, governance requirements, and customer expectations.

- Ability to work in a fast-paced operational environment supporting critical business services and cyber security outcomes.

Desirable Qualifications

- CompTIA Security+

- CompTIA Cybersecurity Analyst (CySA+)

- Microsoft SC-200: Security Operations Analyst

- Splunk Core Certified Power User

- Splunk Enterprise Security Certified Administrator

- Splunk SOAR (Phantom) Certified Automation Developer or Administrator

- Microsoft SC-300 or equivalent Identity and Access Management certification

- ITIL Foundation Certification

- Relevant tertiary qualification in Cyber Security, Information Technology, Computer Science, Engineering, or a related discipline

📌 Cyber Security Analyst (Brisbane)
🏢 Telstra
📍 Brisbane