Lead Cyber Security Incident Response Analyst

16 hours ago


Sydney Eastern Suburbs, Australia Robert Half Full time

Join this large & recognisable global firm in a newly created role to lead the execution & coordination of IR processes, automation, and cloud IR.
- Newly created role in a well-known global firm
- Lead CSIRT activities in the region
- Full time permanent role | Hybrid working

**THE COMPANY**

This large and well-known organisation employs more than 70,000 staff in 100+ countries around the globe.

They are a creative and innovative business that are expanding their Cyber Security capabilities in Australia.

**THE ROLE & RESPONSIBILITIES**

Newly created Cyber Security Incident Response Team Lead role working alongside the global SOC and Threat Intelligence teams to act as a regional incident coordinator during events that require orchestrated responses.

You will be responsible for ensuring the organisations IT & cyber assets are monitored, improved, documented, automation, and protected to the highest standard.

**Key elements include**:

- Lead & manage the execution of Incident Response processes in the region.
- Design, develop & provide ongoing improvement to Incident Response processes.
- Prepare metrics to track & improve Incident Response processes.
- Lead the development of SOAR playbooks & become the SME for automated workflows and processes that adhere to compliance requirements (ISO 27001, GDPR etc).
- Lead the development of cloud-focused Incident Response processes.
- Assist in maintaining & improving the Incident Response framework.
- Act as the liaison between Senior Executives, Internal Audit & Legal teams, and business unites during major incidents and post incident investigations.
- Contribute to building out the security strategy.
- Lead & mentor junior CSIRT Analyst's.
- Work alongside a global team in a 'follow-the-sun' model.

**REQUIRED EXPERIENCE / BACKGROUND / KNOWLEDGE**

Suitable for a Lead/Senior CSIRT Analyst with proven experience executing & coordinating multi-level Incident Response processes as well as leading automation initiatives.

Ideal for a natural collaborator with excellent communication & stakeholder management abilities who can 'see the big picture' and think strategically.

**The following is required**:

- Proven Senior CSIRT exp and SME knowledge executing & coordinating Incident Response processes.
- SIEM threat hunting exp & ability to create queries to detect incidents.
- Endpoint & network analysis background identifying threats.
- Ability to translate orchestration design documents into SOAR playbooks.
- Cloud security knowledge, including techniques to secure cloud environments & cloud Incident Response.
- Scripting experience - e.g. Python, JavaScript, PowerShell,.Net etc
- MITRE ATT&CK framework experience.
- IT security framework knowledge - e.g. ISO 27001, COBIT, NIST etc
- Background inside enterprise environments working with globally dispersed teams.
- Strong attention to detail, problem-solving & analytical skills
- Excellent communication & stakeholder management abilities.

**This is a full-time permanent role located in Sydney with hybrid working available.**
- _Please note, unrestricted permanent Australian working rights are required to be considered for this position and successful applicants will be contacted. _


  • Cyber Security Analyst

    16 hours ago


    Sydney Western Suburbs, Australia HAYS Full time

    Cyber Analyst, Western Sydney, 3-month contract, $600-650 p/d + super **Your new company** This role sits within a government organisation with a head office in Western Sydney. You will work with a government agency with an excellent reputation in a highly productive team. **Your new role** The Cyber security Analyst is responsible for administration of...


  • Sydney, Australia NSW Government -Department of Customer Service Full time

    **Role: Cyber Security Analyst Roles** **Grade: Ongoing - Grade 7/8** **Location: Sydney or Bathurst** ***Role Type: Full Time Permanent** **About the Role** Cyber Security NSW is looking for a Cyber Security Analyst, focusing on incident response, to join our Intelligence and Response Team. The Intelligence and Response Team leads and coordinates...


  • Sydney, New South Wales, Australia Skylight Cyber Security Full time

    About Skylight CyberAt Skylight Cyber, we're young, transparent, and culture-focused boutique cyber security firm specialising in providing high-end services to enterprises globally. We provide our customers with world class expertise to build and continuously evolve an effective security stack across people, process, and technology.We thrive and are...


  • Sydney, Australia AI Talent Full time

    **Job description** We are seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team. As a Senior Cyber Security Analyst, you will play a pivotal role in safeguarding our organization's systems, networks, and data from cyber threats. Your expertise in cybersecurity frameworks, risk assessment, incident response, and security...


  • Sydney, Australia NSW Department of Customer Service Full time

    **Cyber Security Analyst, Ongoing opportunities based in Sydney, Gosford or Parramatta + hybrid working options** **The Department of Customer Service (DCS) is looking for a Cyber Security Analyst to join our growing cyber security team! **Benefits** - Ongoing Grade 7/8 position delivering operational cyber security capabilities to defend and protect...


  • Sydney, New South Wales, Australia AI Talent Full time $80,000 - $140,000 per year

    Job DescriptionWe are looking for a seasoned and highly capable Senior Cyber Security Analyst to join our team. In this key role, you will be responsible for protecting the organisation's systems, networks, and data against evolving cyber threats. Your deep knowledge of cyber security frameworks, risk management, incident response, and operational security...


  • Sydney, Australia Macquarie Group Limited Full time

    -Join our diverse and global Cyber Threat and Incident Response team within the Cyber Security Department of our Technology division. At Macquarie, our advantage is bringing together diverse people and empowering them to shape all kinds of possibilities. We are a global financial services group operating in 34 markets and with 55 years of unbroken...


  • Sydney, New South Wales, Australia Reserve Bank of Australia Full time $120,000 - $180,000 per year

    Senior Cyber Security Analyst (Cyber Hunt and Incident Response Team)Play an important part shaping the future of our iconic Australian institution.Hybrid work environment.Permanent position.Join a team focused on remaining at the forefront of technology.About the RoleThe Reserve Bank of Australia is hiring for a Senior Cyber Security Analyst to join a newly...

  • Cyber Security Analyst

    16 hours ago


    Sydney, Australia Field Effect Full time

    Are you a skilled Cyber Security Analyst ready to make a meaningful impact in a forward-thinking and inclusive environment? Field Effect is hiring a Cyber Security Analyst to join their Analytic Operations team to monitor and assess diverse client IT environments to deliver an ongoing managed cyber security service. As part of the Analytic Operations team,...


  • Council of the City of Sydney, Australia Reserve Bank of Australia Full time

    **Senior Cyber Security Analyst (Cyber Hunt and Incident Response Team)*** Play an important part shaping the future of our iconic Australian institution.* Hybrid work environment.* Permanent position.* Join a team focused on remaining at the forefront of technology.**About the Role**The Reserve Bank of Australia is hiring for a **Senior Cyber Security...