Total 75 command center analyst job vacancies in Legal / Public / Security category in Australia

What you get to do in this role
 
We are looking for a highly motivated, collaborative and technically experienced Security Compliance - Junior Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNow’s controls including intent, and drive changes within the organisation through effective testing. The successful candidate must be reliable, resourceful and have a “can-do” attitude.  
 
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.   

ServiceNow current compliance initiatives are focused on, but not limited to Australia’s IRAP, Singapore MTCS, Japan’s ISMAP, and other global programs such as ISO 27001, ISO 27018, PCI, SSAE 18, and SOC 2. Security Compliance Junior Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.    
 
Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures 
• Facilitate certifier requests and information gathering for audit activities and lead onsite audits
• Conduct activities to comply with the various Government Cyber Security requirements within the APJ
• Successfully drive security compliance testing activities across various teams within the organisation 
• Contribute by enhancing and maturing the existing common control framework 
• Liaise with Risk Management and conduct security risk assessment activities  
• Help our customers understand ServiceNow’s security and compliance control environment 
• Contribute towards enhancing the GRC tool and processes to meet compliance business needs 

The Security Support Analyst would be responsible for the day-to-day Cyber support of the Leidos Airborne Solutions environment, associated services, and applications.

The objective of this position is to provide Cyber support and services aligned to Leidos Airborne Solutions business requirements.

Primary Role

• Proactively manage and monitor cyber security threats to systems with Leidos Airborne Solutions
• Use available Cyber tools and processes to prevent, identity and respond to Cyber threats.
• Ensuring alignment with IT frameworks including ASD Essential Eight and ISM
• Communicate support actions, activities and schedules with all responsible parties in relation to jobs in progress and recorded in the ITIL software system.
• Attend regular team meetings.
• Provide Status updates to IT Management.

Secondary Role

• Receive and respond to incoming calls, and/or e-mails.
• Support other IT team members when required.
• Forecast and plan for future requirements.
• Deliver all project tasks on agreed time within agreed scope.
• Contribute ideas to assist the team in reaching its strategic objectives.

Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities will include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our Customers' data and digital assets.

What will you do:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

What we are looking for:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating. Nothing stands still in security.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

What we offer:

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.

We are committed to building an inclusive and diverse global workforce. We believe that the best way to learn, grow, and succeed, both as individuals and as a company, is to foster a culture that is fundamentally rooted in equality.

Join us as we transform cyber security, user privacy, and machine learning online!

Grow your career with a global retailer as a Security Analyst (Enterprise Collaboration & Security) within our National IT team at ALDI Australia, based in Minchinbury. This is a 12 Month Fixed term opportunity.

Our IT team is at the responsible of developing and deploying innovative technology solutions, ensuring the integrity of our company's data and systems is uncompromised. Here, IT is more than just maintenance – it's about providing practical, reliable, and secure solutions that keep our company competitive. With us, you can make a real difference to real people and take pride in being part of a truly international team. Your expertise can shape the future of our business in this rapidly evolving, technology-driven world.

With the opportunity to make a real difference to real people, ALDI is a place you’ll feel proud to work.

What does the role look like? 

• Liaising and consulting with internal stakeholders in all queries related to Cyber Security
• Develop solution concepts in consultation with our local Infrastructure teams
• Conduct security assessments to support Infrastructure projects
• Assisting with ad hoc tasks related to Application Security (Penetration Testing, Policy Exemptions)
• Review solution concepts and advise on security standards
• Conducting protection needs, business impact and risk analyses​
• Early involvement and deeper understanding of Infrastructure projects
• Review and implementation of security Policies, Procedures, and Guidelines
• Engage with external security vendors/partners to facilitate table-top exercises, security maturity assessments and incident response strategies
• Supporting the business to mitigate risks associated with Cyber Security
• Participating in meetings with stakeholders on topics relevant to Cyber Security

About Us

The Missing Link have been operating in Australia for over 26 years with offices in both Sydney and Melbourne. With over 180+ staff, you will be joining a highly successful team which is set to grow.

Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services.

Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas:

• Red Team (Security Consulting & Penetration Testing)

• Blue Team (Security Architecture & Engineering)

• Security Operations Centre (SOC)

We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia.

We have a number of focus areas and specialisation within the SOC, these are:

• Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure

• Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs

• Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM

• Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios
  

The Role

The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises.

You will also be proactively supporting our clients and the Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities.

We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role.

Essential:

• 1+ years of experience working with systems, networking and security technologies either in an Managed Service Provider, or equivalent role.

• Hands-on security knowledge of Windows/Linux/Unix platforms

• Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology

• In-depth knowledge of the MITRE ATT&CK Framework

• A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack

Desirable:

• You are naturally curious and a self-starter. Tell us about how you build Cyber Labs and Ranges in your own time, or your latest research project.

• You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking.

• You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better!

• Show us how you automate using PowerShell and Python. • You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

•        We're changing the game!
•        We're doing big things, and we can't do it alone.
•        We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.

AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.

AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.

Role purpose

• To bring a targeted and disciplined approach to security monitoring and testing, identifying risks, and providing reporting to the technical administrators as well as the business department heads 
• The role works within the Security function, so would require someone who is proactive and analytical with a curious mindset, who can understand and derive data from a number of sources and report on the findings in a number of formats.

Key Responsibilities

• Maintain security monitoring through a range of tools within AP+ such as Qualys, Splunk, Darktrace, Crowdstrike, AWS, Microsoft and others to proactively monitor the security of the environments.
• Being able to analyse, interpret and utilise data to add value to the security function in being proactive on what/why/how trends occur, and present the findings for the head of security to report to the business leaders. 
• Utilising a wide range of tools and work with the security team to automate a range of reports to provide trending and business risk analysis. 
• Understand and keep up to date with the latest news or updates on cyber security and feed that information into the reporting. 
• Work within the security team to promote cyber awareness across the business.

Key Challenges

• Absorb data and produce meaningful and business digestible reports.
• Key scripting or programming knowledge to perform data analysis.
• Strong communications skills particularly in report writing.
• Understand a large data set and derive actionable information from it 
• Gathering and utilising data from numerous tools 
• Upskill in programming languages, ideally Python to automate large workloads. 
• Strong excel, powerpoint skills to present data to a business audience. 
• PowerBI or other data analytic tool skills ideal

• Relevant certifications or equivalent experience in information technology, computer science or a related discipline.
• At least 2-3 year’s experience in an IT role working with technologies.
• Strong data analysis and cyber security knowledge.
• Python or similar data programming , strong excel skills for data management, strong PowerBI or other data analysis tools.
• Strong MS office skills beyond basic usage.
• Strong verbal and written ability.
• Exceptional report writing skills.
• Strong analytical skills and problem solving ability.

We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to [email protected]. We also encourage you to let us know your pronouns at any point during the recruitment process.

*AP+ are not working with Recruitment Agencies for this role.

We are seeking a Senior Security Analyst to Manage the IT security systems, components, and processes which proactively protect the integrity, confidentially and availability of corporate business Information. Based onsite at Moorabbin, You will perform this by effectively assisting in designing, developing and implementing Enterprise Infrastructure and Applications Security strategies.

About this opportunity

Reporting to Pact's Cyber Security Manager, you will manage security posture, audits and security risk processes for BAU and all project activities. In addition, you will assist with architecture and design for security as well as assist in major incident management.

Your key responsibilities will be to:

• Help Define security policies, standards, guidelines and procedures to ensure ongoing maintenance of security
• Audit IT Infrastructure and Applications to ensure compliance of policies, standards, guidelines, procedures
• Be the focal point for ALL security related questions queries
• Assist to Manage the security education requirements for IT and Pact as a whole

Your skills and experience

To be successful in this role, you’ll have:

• Knowledge of security frameworks, standards, policies and best industry practices
• Ability to assist in analyzing, isolating and interpret business requirements/issues and translate into appropriate security and risk solutions
• Excellent verbal and written communication skills
• Ability to bridge the gap between IT and business needs
• An appreciation of IT, business and regulatory strategies in relation to IT security
• Experience in evaluation of security and technology risk issues relating to latest technologies and business solutions
• Bachelor’s degree in IS Security, IT, MIS, etc.

Reporting to the Director of Corporate Security, the Security Analyst provides technology leadership and hands-on management of key security related IT operations and infrastructure items for the internal corporate systems.  The Information Security Analyst will ensure compliance of overall security program and policies.  Additionally, provides a cyber secure environment and security posture that fosters a high-trust relationship between Dynatrace, its employees, partners, and customers.

This role will be responsible for Threat response, Vulnerability management, executing strategies and ensuring organizational and client IT security expectations are being satisfied. There will be an expectation of collaborating with various cross organizational teams to identify the approach, deliverables, schedule, and tools to deliver within established constraints.

• Location: Australia or APAC region.
• Remote or virtual work is possible if located in the Asia Pacific region.

Responsibilities

• Examine and respond to reported security incidents and phishing attempts, determining the root cause, and escalating as needed.
• Manage and track remediation activities discovered through vulnerability management and scanning tools.  Ensure vulnerability management policy is followed.
• Become subject matter expert (SME) and make recommendations for improvements in security monitoring and compliance tools such as SIEM, Scanning Tools, Firewalls, Microsoft E5 Security Suite, etc.
• Develop and deploy pragmatic solutions, practices, and procedures to ensure Dynatrace meets internal and customer security requirements. 
• Provide operational efficiency within the security team by providing and analyzing key metrics, performance indicators and threat assessments in accordance with security policies and procedures.
• Uncover, categorize, track and close security loopholes to maintain a secure environment.
• Maintain and validate security evidence repository with required documentation for compliance with security policies and audit requests.
• Generate dashboard and scorecards to articulate the current security posture and threat level.
• Reduce time to complete customer security RFIs while improving accuracy and quality of responses.
• Obtain 100% compliance with IT security awareness policy both annually and for new hire training within the specified training windows.
• Maintain SOC2 Type 2 attestation on an annual basis, pursue and facilitate additional certifications as required by business (FedRAMP, ISO 27002:2013, etc.).
• Review Dynatrace vendor’s security posture to ensure they meet Dynatrace requirements.
• Work with third-party security vendor, ensure they have high quality responses and review all RFI responses for accuracy.  Ensure security controls and question bank are updated and accurate.