Security Operations Analyst

Accountabilities:

Monitor, triage, investigate, and respond to security alerts generated by the cybersecurity platform, identifying threats and coordinating appropriate remediation.
Analyse EDR/SIEM telemetry, system logs, and forensic artifacts to determine attack root causes and understand the full scope of security incidents.
Perform dynamic malware analysis when required to identify malicious behaviour, extract indicators of compromise, and assess suspicious files.
Investigate attacker activity across Windows, Linux, and macOS environments, identifying techniques such as credential theft, lateral movement, persistence, and data exfiltration.
Analyse suspicious activity within Microsoft 365 and Google Workspace environments, providing actionable recommendations to secure compromised accounts and tenants.
Develop, refine, and optimise detection capabilities by creating and tuning security signals, improving alert quality, and maintaining efficient investigation workflows.
Support customer success by assisting security support teams with escalations and technical questions relating to threats and security operations.
Collaborate with Product and Engineering teams to improve security products, detection mechanisms, and human-led, AI-assisted security workflows.
Continuously develop technical knowledge through real-world investigations, professional training, threat research, and the responsible use of AI tools to improve analytical efficiency.
Contribute to the wider cybersecurity community by sharing research, insights, and technical expertise through publications, webinars, blogs, and industry events.
Requirements:
At least 2 years of professional experience in Security Operations, Incident Response, Managed Detection and Response (MDR), or Digital Forensics.
Practical knowledge of at least one major operating system: Windows, Linux, or macOS, including its attack surfaces, malware behaviour, and common threat actor techniques.
Understanding of system administration concepts and how attackers exploit them, including Active Directory, PowerShell, Group Policy, and local account management.
Familiarity with the MITRE ATT&CK framework and common adversary tactics, including credential dumping, lateral movement, persistence, and data exfiltration.
Good understanding of networking fundamentals, including ports, protocols, NAT, public and private IP addressing, and VLANs.
Strong investigative and analytical skills, with a genuine interest in digital forensics, analysing system logs, processes, and artifacts to uncover malicious activity.
Ability to communicate technical findings clearly and translate complex security issues into practical recommendations for different audiences.
Strong written and verbal communication skills, combined with curiosity, initiative, and a commitment to continuous professional development.
Experience using AI tools to support security research and daily analysis, with the ability to critically validate outputs before taking action.
A collaborative mindset, resilience under pressure, and the ability to take ownership of investigations and deliver effective outcomes.
Willingness to work Monday to Friday, from 8:00 AM to 4:00 PM Perth time (AWST). Candidates based elsewhere in Australia must be able to accommodate these working hours in their local time zone.
Benefits:
Fully remote working arrangement from anywhere in Australia.
Competitive annual base salary ranging from AUD 110,000 to AUD 140,000, plus performance-based bonus and equity opportunities.
Stock options available to all full-time employees.
AUD 800 reimbursement towards setting up your home office when joining.
Monthly AUD 185 digital allowance to help cover personal phone and internet expenses.
Additional monthly AUD 40 home-office technology stipend for equipment upgrades and replacements.
12 weeks of paid parental leave for both primary and secondary carers.
Subsidised private health insurance through a preferred provider.
Access to the BetterUp platform for personal development, professional coaching, and career growth.
Opportunities for paid training and continuous technical development.
At least one annual trip to the United States for the company-wide Summer Summit, alongside additional local events in Australia.
A supportive, inclusive, and collaborative international team environment.
Opportunities to contribute to cutting-edge cybersecurity research, product innovation, and industry knowledge-sharing initiatives.