Security Operations Center Analyst Iii

5 months ago


North Sydney, Australia Gallagher Full time

About Us:
Welcome to Gallagher - a global leader in insurance, risk management, and consulting services. With a growing team of more than 45,000 professionals worldwide, we empower businesses, communities, and individuals to thrive. At Gallagher, you can build a career whether it’s with our brokerage division, our benefits and HR consulting division, or our corporate team. Experience The Gallagher Way, a culture fueled by shared values and a collective passion for excellence. Join one of our dynamic teams, where you'll play a pivotal role in shaping Gallagher's future and unlocking unparalleled opportunities for both clients and yourself.

Overview:
**Gallagher** is one of Australia’s and the world’s largest Insurance broking and risk management companies with over 35,000 employees globally. We pride ourselves on being a socially responsible, ethical and collaborative organisation expressed through our Shared Values, The Gallagher Way. We are also proud to be on the **Forbes World’s Best Employers list** as the only Insurance brokerage.

As a SOC Analyst III - (Incident Commander), you will play a crucial role in protecting our organization's digital assets and infrastructure from cyber threats. You will be responsible for promptly detecting, analysing, and responding to security incidents to minimize their impact and prevent future occurrences. This position requires a deep understanding of security operations, incident response methodologies, and advanced threat detection techniques. You will collaborate with cross-functional teams to investigate incidents, perform root cause analysis, and develop proactive measures to enhance our overall security posture.

This role reports into the APAC IT Security Manager, with a dotted line into the global Cyber Incident commander.

**Key Responsibilities**

**Incident Response Management**:

- Lead and coordinate the organization's incident response activities, ensuring swift and effective incident resolution in accordance with global SOC response procedures
- Monitor security alerts and incidents to identify potential threats, vulnerabilities, and indicators of compromise.
- Perform in-depth analysis of security incidents, including the identification and containment of threats, and recommend appropriate response actions.
- Conduct detailed forensic analysis and investigations to determine the root cause and impact of security incidents.
- Develop and maintain incident response playbooks, standard operating procedures, and communication protocols.

**Threat Detection and Analysis**:

- Utilize security monitoring tools and technologies to identify potential security incidents and breaches.
- Perform proactive threat hunting activities to detect advanced threats and vulnerabilities in the environment.
- Conduct analysis of security events and logs to identify patterns, trends, and emerging threats.
- Collaborate with threat intelligence teams to incorporate external intelligence into detection and response strategies.

**Incident Mitigation and Recovery**:

- Execute timely and effective containment, eradication, and recovery activities in response to security incidents.
- Coordinate with IT teams to isolate affected systems, patch vulnerabilities, and implement corrective actions.
- Assist in system and network hardening activities to improve the overall security posture of the organization.
- Support business continuity and disaster recovery plans to ensure resilience in the event of a security incident.

**Incident Reporting and Documentation**:

- Prepare accurate and detailed incident reports, including the description of events, actions taken, and lessons learned.
- Maintain comprehensive documentation of incident response activities, including evidence collection and preservation.
- Collaborate with legal and compliance teams to ensure adherence to regulatory requirements and incident reporting obligations.

**Required skills and experience**
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Minimum of 6 years of experience in a dedicated incident response role within a Security Operations Centre (SOC) environment.
- Strong knowledge of incident response methodologies, tools, and industry frameworks (e.g., NIST CSF, MITRE ATT&CK).
- Knowledge of malware analysis techniques, digital forensics, and memory analysis.
- Familiarity with cloud security concepts and technologies (e.g., AWS, Azure and GCP).
- Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
- Strong communication, stakeholder engagement and interpersonal skills to effectively collaborate with cross-functional teams,.
- Relevant certifications such as CISSP, GCIH, GCIA, or similar are highly desirable.
- Knowledge of security frameworks and standards such as ISO 27001, Australian Government PSPF / ISM., NIST, GDPR, PCI DSS.
- IT framework knowledge: COBIT, ITIL

**Gallagher** offers great benefits and career



  • Sydney, Australia TikTok Full time

    Responsibilities About TikTok U.S. Data Security TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (“USDS”) is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and...


  • North Sydney Council, Australia Https:www.energyjobline.comsitemap Full time

    AWS Security Operations Center Job DescriptionThe AWS Security Operations Center (SOC) is seeking a highly skilled Security Engineer to lead the response to security issues across the largest cloud provider in the world.Key Responsibilities:Conduct security response activities for Amazon internal servicesLead the response to security issues with a focus on...


  • Sydney, Australia Equinix Full time

    Data Center Concierge III Who are we? Equinix is the world’s digital infrastructure company, operating 200+ data centers across the globe and providing interconnections to all the key clouds and networks. Businesses need one place to simplify and bring together fragmented, complex infrastructure that spans private and public cloud environments. Our...


  • North Sydney Council, Australia Https:www.energyjobline.comsitemap Full time

    AWS Security Operations Center Job DescriptionThe AWS Security Operations Center (SOC) is seeking a skilled Security Engineer to lead the response to security issues across the largest cloud provider in the world. This role involves conducting security response activities for Amazon internal services. We value broad and deep technical knowledge, specifically...


  • North Sydney Council, Australia Https:www.energyjobline.comsitemap Full time

    AWS Security Operations Center Job DescriptionThe AWS Security Operations Center (SOC) is seeking a skilled Security Engineer to lead the response to security issues across the largest cloud provider in the world. This role involves conducting security response activities for Amazon internal services. We value broad and deep technical knowledge, specifically...


  • North Sydney, Australia Nine Full time

    **Company Description** Nine is Australia’s largest locally owned media company - the home of Australia’s most trusted and loved brands spanning News, Sport, Lifestyle, and Entertainment. We pride ourselves on creating the best content, accessed by consumers when and how they want - across Publishing, Broadcasting and Digital. Our Purpose: We shape...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer plays a critical role in ensuring the security and integrity of AWS data centers and services. As a member of the SOC team, you will be responsible for providing technical support and security response for logical services and physical data center systems.Key...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer plays a critical role in ensuring the security and integrity of AWS data centers and services. As a member of the SOC team, you will be responsible for providing technical support and security response for logical services and physical data center systems.Key...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer plays a critical role in ensuring the security and integrity of AWS data centers and services. As a key member of the SOC team, you will be responsible for providing technical support and security response for logical services and physical data center systems.You...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer plays a critical role in ensuring the security and integrity of AWS data centers and services. As a member of the SOC team, you will be responsible for providing technical support and security response for logical services and physical data center systems.Key...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer plays a critical role in ensuring the security and integrity of AWS data centers and services. As a member of the SOC team, you will be responsible for providing technical support and security response for logical services and physical data center systems.Key...


  • Sydney, Australia iManage Full time

    This is a remote position. We are a global team that leverages the latest technology to communicate with our colleagues across the globe. There may be times in which this role would be required to travel to a local office for in-person collaborations with your team. Being a Security Operations Analyst at iManage means… The iManage Cloud Security...


  • North Sydney, Australia Nine Full time

    Job DescriptionThe Cyber Security Analyst will be a part of the security operations team (SOC) aspiring to detect, hunt and respond to cyber security threats to Nine. This role will be a great fit for a blue teamer with understanding and interest in red team tactics and techniques, someone with an analyst mindset who wants to be actively involved in threat...


  • North Sydney, Australia Nine Entertainment Full time

    Job Description The Cyber Security Analyst will be a part of the security operations team (SOC) aspiring to detect, hunt and respond to cyber security threats to Nine. This role will be a great fit for a blue teamer with understanding and interest in red team tactics and techniques, someone with an analyst mindset who wants to be actively involved in...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    Job SummaryThe Amazon Web Services (AWS) Security Operations Center (SOC) Support Engineer is responsible for providing technical support and security response for logical services and physical data center systems. This role requires a strong understanding of security principles and experience with practical application of security best practices.Key...


  • Sydney, Australia Charterhouse Full time

    **_Cyber Security Operations Analyst - NSW Government department_** - **Sydney CBD, hybrid flexibility**: - **6 Months Contract with possibility of extension**: - **Rewarding program**: - **Collaborative Environment working with multiple stakeholders** I am currently supporting a client within NSW Government in their search for a Security Operations...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    Job Title: AWS Security Operations Center Support EngineerWe are seeking a highly skilled Security Operations Center (SOC) Support Engineer to drive security strategies and procedures in accordance with service level agreements, policies, standards, and operating procedures.Key Responsibilities:Drive security findings, research mitigations, and analyze...


  • Sydney, Australia TikTok Full time

    Responsibilities About TikTok U.S. Data Security TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (“USDS”) is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and...


  • North Sydney Council, Australia Amazon Corporate Services Pty Ltd Full time

    About the RoleWe are seeking a highly skilled Security Engineer to join our AWS Security Operations Center team. As a Security Engineer, you will be responsible for leading the response to security issues across the largest cloud provider in the world.Key ResponsibilitiesConduct security response activities for Amazon internal servicesLead the response to...


  • Sydney, Australia MBC Recruitment Full time

    Sydney CBD location - NSW Government Opportunity - Competitive Pay Rate **Position**: Security Operations Analyst **Start**:ASAP **Salary**: $878.60-$1,010.39 per day plus superannuation **Duration**: 6 months **Location**: Sydney CBD, NSW **Overview** The role of Security Operations Analyst is responsible for the protection of data, information...