Job Type: Full time

About the opportunity A leading financial services organisation is looking for an experienced Security Analyst to strengthen its security capability. You'll be the person who spots targeted attacks against critical, customer-facing assets in the noise of logs and events, and helps shut them down.You'll work in a high-performing security team, ideally using Splunk and your knowledge of current attack techniques to detect, investigate and respond to threats across web applications, networks and endpoints.What you'll doAnalyse web, application, authentication, endpoint and security appliance logs to identify malicious activityUse Splunk (or any other SIEM tool) to investigate security events, and build macros, alerts and dashboards that surface targeted attacksIdentify common exploits and attack patterns (OWASP Top 10 and beyond) from web and event logsInterpret Apache, IIS and Active Directory logs alongside other security data sourcesDetect anomalous or malicious network activity using advanced analytics and security toolingSupport incident response, recommending and helping implement mitigations,



including WAF and CDN security controlsInterpret stateful firewall rules and contribute to security operations procedures and continuous improvementAbout youEssentialStrong intrusion analysis background, with proven ability to interpret web and application logs from a security perspectiveSolid understanding of how web applications work under the hood, including HTTP/HTTPS, DNS and TLSKnowledge of common web application attack vectors and current exploits, including SQL injection, cross-site scripting and remote file inclusionExperience independently investigating issues end-to-end and incident response experienceComfortable with scripting languages and regular expressionsWorking knowledge of enterprise client/server architectureIntermediate to expert capability, equivalent to L2/L3 in a tiered SOC modelExperience with Web Application Firewalls (WAF)Experience with Akamai or other CDN security controls beneficialIf this sounds like you, and you are a Permanent Resident or an Australian citizen, please apply at the earliest with your resume! You can contact Urvi Thacker for any queries.

📌 Security Detection and Response Analyst (Australia)
🏢 Morgan Mckinley
📍 Australia