Threat Analyst, Level 2

This is a fully remote position, open to applicants in Australia.

📋 Description

• Investigate, identify, and mitigate cyber threats utilizing enterprise systems, log analysis systems, and endpoint collection systems.

• Manage escalations from Level I Threat Analysts and provide guidance or advice on investigations.

• Onboard and mentor new Threat Analysts.

• Engage in the enhancement and development of Security Operations processes.

• Deliver detection and response to security incidents and cyber threats.

• Conduct management and monitoring of security logs.

• Maintain metrics related to information security.

• Support core security and threat response teams.

• Generate reports related to MDR services.

• Create cases for clients.

• Monitor and follow up with clients throughout the threat neutralization process.

• Communicate with clients through various channels.

• Research the latest indicators of compromise, attacks, exploits, and vulnerabilities.

• Gather metrics for reporting on threat trends, intelligence analysis, and situational awareness.

⛳️ Requirements

• 2-4 years of experience in a SOC environment or computer security team within an IT setting.

• Experience with endpoint and network security, including IDS, IPS, EDR, ATP, malware defenses, and monitoring.

• Threat hunting experience is preferred.

• Familiarity with common adversary tactics and techniques.

• Knowledge of the MITRE ATT&CK framework is preferred.

• Practical understanding of incident response procedures.

• Preferred experience in constructing SQL queries.

• Experience with OSQuery is an advantage.

• Experience in administering and supporting Windows OS and either Apple or Linux operating systems.

• Basic understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols.

• Strong proficiency in Windows event log analysis.

• Experience managing enterprise information security data; SIEM experience is a plus.

• Proficiency in scripting languages such as KQL, PowerShell, or Python.

• Advanced cybersecurity certifications are preferred but not mandatory.

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent relevant experience.

• Willingness to work outside of standard business hours, including weekends and holidays, for a 24x7x365 service.

• Ability to work effectively both as part of a team and independently.

• Legal authorization to work in Australia without employer sponsorship.

🏝️ Benefits

• Remote-first working model.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives.

• Volunteer days.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training.

• Equal opportunity and recruitment-process adjustments for applicants with disabilities or other needs.