Total 23 support analyst job vacancies in Legal / Public / Security category in nsw regional new england north west nsw

The Cyber Security Analyst will be a part of the security operations team (SOC) aspiring to detect, hunt and respond to cyber security threats to Nine. This role will be a great fit for a blue teamer with understanding and interest in red team tactics and techniques, someone with an analyst mindset who wants to be actively involved in threat hunting, threat intelligence management and investigations using automation, data analysis and curiosity.

This is a hands-on role in a flexible working environment in a small but high functioning and diverse team.  The role  involves detection engineering, incident response, threat hunting and will be interacting with a broad set of business units. Hence, communication skills, problem solving and day to day learning are a big part of it. There is opportunity for involvement in a wide variety of cyber transformational work, training and upskilling.

Responsibilities 

• Investigation and analysis of alerts, advisories and incidents

• Attack surface mapping, critical vulnerability triage and impact analysis

• Curation, enrichment and correlation of indicators, creating actionable intel and managing their lifecycle

• Detection engineering, development and improvement of detection signature base across the SOC toolset

• Data and attack based threat hunting

• Reporting on threat intel, metrics and publishing internal advisories 

• Automation of investigation, incident response and threat intel workflows

• Security Operations tooling management, configuration and operations

• Rotational on call roster 

Join our cyber security team and be part of transforming our digital experience and delivering innovative capabilities for Nine.  We offer a flexible working environment in a culturally diverse and high functioning team. 

This is an expansion of the Cyber Security Engineering team, focused on managing End User risk - configuring, maintaining, and continuously improving cyber security tools such as Cloud Access Security Broker, Zero Trust Network Access, Cloud DLP, Secure Web Gateway, Endpoint Privilege, and EndPoint Management. This will include reviewing and improving monitoring and access controls for other critical SaaS services such as Google Workspace, Slack, JIRA, Confluence.

You will work alongside other members of the Cyber Security Engineering team who are responsible for researching, architecting and implementing Cyber Security capabilities for the Nine group.

This role will also be exposed to other Cyber Security tools, including endpoint privilege, vulnerability management and identity tools amongst others.

The Cyber Security Support Engineer plays a crucial role in safeguarding Nine’s critical systems and data by overseeing key controls that protect Nine’s data and content.  This role involves maintaining and tuning robust policy settings that control access to key applications and portals, managing access to applications, troubleshooting cyber security application issues and responding to service interruptions and incidents. 

This role will also assist the team in performing other key security functions such as vulnerability management, help coordinate vulnerability remediation efforts, and ensure continuous improvement of security posture. Other cyber security engineering tasks involve product evaluation and implementation, risk management and security incident response. 

Key accountabilities of this role is to:

• Implement, configure, and maintain endpoint solutions to securely manage, monitor, and control access.

• Define and enforce policies and procedures for the management of endpoints ensuring compliance with industry standards and regulations.

• Conduct regular reviews and assessments to identify and remediate security risks related to SWG, CASB and DLP.

• Monitor and audit privileged activities, ensuring compliance with policies and promptly addressing any anomalies or security incidents.

• Conduct regular vulnerability assessments, penetration tests, and security scans on systems, networks, and applications to identify vulnerabilities and weaknesses.

• Stay informed about emerging threats and vulnerabilities by monitoring security advisories, research reports, and threat intelligence sources.

• Translate threat intelligence into actionable insights for managing end user risk

About Us

The Missing Link have been operating in Australia for over 26 years with offices in both Sydney and Melbourne. With over 180+ staff, you will be joining a highly successful team which is set to grow.

Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services.

Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas:

• Red Team (Security Consulting & Penetration Testing)

• Blue Team (Security Architecture & Engineering)

• Security Operations Centre (SOC)

We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia.

We have a number of focus areas and specialisation within the SOC, these are:

• Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure

• Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs

• Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM

• Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios
  

The Role

The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises.

You will also be proactively supporting our clients and the Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities.

We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role.

Essential:

• 1+ years of experience working with systems, networking and security technologies either in an Managed Service Provider, or equivalent role.

• Hands-on security knowledge of Windows/Linux/Unix platforms

• Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology

• In-depth knowledge of the MITRE ATT&CK Framework

• A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack

Desirable:

• You are naturally curious and a self-starter. Tell us about how you build Cyber Labs and Ranges in your own time, or your latest research project.

• You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking.

• You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better!

• Show us how you automate using PowerShell and Python. • You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

•        We're changing the game!
•        We're doing big things, and we can't do it alone.
•        We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.

AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.

AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.

Role purpose

• To bring a targeted and disciplined approach to security monitoring and testing, identifying risks, and providing reporting to the technical administrators as well as the business department heads 
• The role works within the Security function, so would require someone who is proactive and analytical with a curious mindset, who can understand and derive data from a number of sources and report on the findings in a number of formats.

Key Responsibilities

• Maintain security monitoring through a range of tools within AP+ such as Qualys, Splunk, Darktrace, Crowdstrike, AWS, Microsoft and others to proactively monitor the security of the environments.
• Being able to analyse, interpret and utilise data to add value to the security function in being proactive on what/why/how trends occur, and present the findings for the head of security to report to the business leaders. 
• Utilising a wide range of tools and work with the security team to automate a range of reports to provide trending and business risk analysis. 
• Understand and keep up to date with the latest news or updates on cyber security and feed that information into the reporting. 
• Work within the security team to promote cyber awareness across the business.

Key Challenges

• Absorb data and produce meaningful and business digestible reports.
• Key scripting or programming knowledge to perform data analysis.
• Strong communications skills particularly in report writing.
• Understand a large data set and derive actionable information from it 
• Gathering and utilising data from numerous tools 
• Upskill in programming languages, ideally Python to automate large workloads. 
• Strong excel, powerpoint skills to present data to a business audience. 
• PowerBI or other data analytic tool skills ideal

• Relevant certifications or equivalent experience in information technology, computer science or a related discipline.
• At least 2-3 year’s experience in an IT role working with technologies.
• Strong data analysis and cyber security knowledge.
• Python or similar data programming , strong excel skills for data management, strong PowerBI or other data analysis tools.
• Strong MS office skills beyond basic usage.
• Strong verbal and written ability.
• Exceptional report writing skills.
• Strong analytical skills and problem solving ability.

We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to [email protected]. We also encourage you to let us know your pronouns at any point during the recruitment process.

*AP+ are not working with Recruitment Agencies for this role.