- Initial 12-month contract
- Sydney CBD location
- 4-day work week

Your role:

An international financial services organisation is seeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

- You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
- You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
- You will provide leadership in assessing new threat vectors and designing and implementing effective controls
- Leverage advanced investigative skills using best in class data correlation and log analysis tools
- Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
- Develop and implement processes or controls in support of audit and risk requirements

Your skills:

- Strong Intrusion Analysis background. You must be able to identify and interpret web and application logs from a security perspective.
- Strong Splunk skill set. You will leverage Splunk to analyze logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
- Knowledgeable of current exploits. You must be able to identify common exploits from the appropriate web and event logs




- Working knowledge of Linux, Windows, and MacOS operating systems
- Comfortable with scripting languages and regular expressions
- Robust knowledge common network protocols, especially HTTP, DNS, TLS
- Working knowledge of enterprise Client / Server architecture

Skills specific to your role:

- Understanding of how web-applications work under the hood and related protocols such as HTTP/HTTPS
- Common attack vectors against web-applications (OWASP top 10 and beyond)
- How to identify attacks/malicious activities through analysis of logs generated by applications, authentication, end-point, security appliances, etc

Your Experience:

- Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
- An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
- Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch
- Broad awareness of information security operations and/or enterprise information technology

Your working hours will be 40 hours over 4-days per week - Wednesday to Saturday.

They are a front-line team that handles active security events and current threats. On call and after hours work can be expected, although they rotate to approximately one week every 2 months.

Apply Now!

📌 Security Analyst (Sydney)
🏢 TalentWeb Consulting
📍 Sydney