Security Analyst

Security Analyst

Key responsibilities:

Security Platform Management

• Administer and manage CrowdStrike security platform, including deployment, configuration, and optimization

• Monitor security alerts and events through CrowdStrike console

• Perform regular health checks and ensure platform updates are applied

• Manage endpoint detection and response (EDR) activities

• Configure and fine-tune detection rules and policies

Threat Detection & Response

• Monitor, analyse, and respond to security incidents and alerts

• Investigate suspicious activities and potential security breaches

• Perform root cause analysis on security incidents

• Document incident response procedures and maintain incident logs

• Implement remediation measures and track resolution progress

Security Reporting & Communication

• Prepare regular security status reports for management

• Provide updates on security metrics, incidents, and trends

• Generate monthly and quarterly security dashboards

• Present findings and recommendations to stakeholders

• Respond to internal and external due diligence queries regarding security controls and practices

Threat Intelligence & Awareness

• Stay current with emerging security threats, vulnerabilities, and attack vectors

• Monitor threat intelligence feeds and security advisories

• Assess the relevance and impact of new threats to the organisation

• Share threat intelligence insights with the team

• Recommend proactive security measures based on threat landscape

Security Testing & Compliance

• Coordinate and manage annual penetration testing exercises

• Work with external security assessors and penetration testers

• Review penetration test findings and develop remediation plans

• Track and verify remediation of identified vulnerabilities

• Conduct annual Essential Eight security maturity assessments

• Ensure compliance with Essential Eight framework requirements

• Document security controls and maintain compliance evidence

This role requires a professional, confident and highly organized person. To be successful in this fast-paced role, you will possess the following:

Required:

• 4+ years working in information security or cybersecurity operations

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field

• Familiarity with fund management, non-bank lending industry and regulatory landscape.

• Hands-on experience with security monitoring and incident response

• Should be open for Full Onsite and Early Day Shift Schedule.

Preferably:

• Relevant security certifications (Security+, CySA+, CEH, GCIH, or similar)

• CrowdStrike Certified Falcon Administrator or similar certification

• Experience with compliance frameworks (ISO 27001, NIST, CIS Controls)

• Familiarity with scripting languages (PowerShell, Python)

• Knowledge of Australian government security frameworks (ACSC, ISM)

• Ability to explain technical security concepts to non-technical stakeholders

• Proven experience with CrowdStrike or similar EDR/XDR platforms

• Strong understanding of security principles, threats, and vulnerabilities

• Knowledge of Windows and Linux operating systems

• Familiarity with network protocols, firewalls, and security technologies

• Experience with security information and event management (SIEM) tools

• Knowledge of penetration testing methodologies and vulnerability management