Cyber Security Analyst
Description
The Mission
We are here to find those who strive for excellence, go the extra mile, and crave continuous growth.
We’re an all-Australian cybersecurity firm helping some of the country’s biggest organisations stay ahead of cyber risk. Proudly recognised as a 2026 Great Place to Work®, we’ve built a culture that champions growth, celebrates initiative, and supports people who are motivated to make an impact. We’re looking for people who share our drive to learn relentlessly, act with integrity, and raise the bar for our clients and teammates alike – those seeking a place where your drive and expertise are met with equal enthusiasm and opportunity. Dive into a culture that treasures innovation and offers a growth platform that is as limitless as your ambition and work ethic.
The Opportunity
As a Cyber Security Analyst, you will provide cybersecurity analysis, assessment, and advisory services to multiple business clients.
The position is responsible for analysing client environments to identify cybersecurity risks, assessing the effectiveness of existing security controls, and developing recommendations to protect information systems, networks, applications and business data from cyber threats.
The role involves conducting security assessments, analysing security events and system logs, investigating potential security incidents, evaluating vulnerabilities and implementing appropriate security measures across diverse client environments, including cloud platforms, on-premises infrastructure, computer networks, servers, endpoints and business applications.
The Cyber Security Analyst will also be responsible for assessing security risks and recommending improvements to clients' overall cybersecurity posture.
The position works closely with internal technical teams, external technology vendors and client stakeholders to analyse security requirements, investigate security issues and ensure that cybersecurity risks are appropriately identified, documented, communicated and managed in accordance with agreed service levels and applicable security frameworks.
Skills and Qualifications
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related discipline.
Relevant industry certifications in cybersecurity, information security, network security, cloud security or security operations will be highly regarded.
Knowledge of cybersecurity principles, security risk management, threat analysis, vulnerability assessment and incident response.
Understanding of network security, operating systems, cloud environments, identity and access management, and security monitoring technologies.
Experience analysing security events, investigating potential cyber threats and recommending appropriate security controls.
Familiarity with security frameworks, industry standards and cybersecurity best practices.
Role and Responsibilities
Analyse client environments, networks, systems and applications to identify cybersecurity risks, threats, vulnerabilities and weaknesses, and recommend appropriate risk mitigation strategies and security improvements.
Conduct cybersecurity risk assessments, vulnerability assessments and security reviews, evaluating the effectiveness of existing security controls and recommending improvements in line with industry standards and cybersecurity best practices.
Monitor and analyse security events, system logs, network traffic and security alerts to identify suspicious activities, investigate potential cyber threats and assess the impact of security incidents.
Investigate and respond to cybersecurity incidents, coordinate containment, remediation and recovery activities, and implement preventative measures to minimise the risk of future security breaches.
Assess and improve security configurations and controls across network infrastructure, servers, endpoints, Microsoft 365, Azure and other cloud environments, including identity and access management, authentication, privileged access and infrastructure hardening.
Prepare cybersecurity assessment reports, document identified risks and vulnerabilities, provide specialist security advice and recommendations to clients, and collaborate with internal technical teams and external vendors to implement security improvements and maintain effective cybersecurity practices.