Security Operations Analyst (Incident Response & Threat Detection)

Jobgether • Australia

Remote

Apply Now

AI Summary

Join a globally distributed cybersecurity team as a Security Operations Analyst to investigate active intrusions, analyze forensic evidence, and remediate malicious activity. You’ll work with EDR/SIEM technologies, improve threat detection, and collaborate with cross-functional teams to enhance security capabilities. Requires 2+ years of experience in incident response, MDR, or digital forensics with hands-on technical expertise in Windows/Linux/macOS environments.

Key Highlights

Hands-on incident response with real-world cybersecurity threats

Collaboration with Product, Engineering, and Security teams to enhance detection and remediation

Remote-first role with competitive salary, benefits, and professional development opportunities

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Key Responsibilities

Monitor, triage, investigate, and respond to security alerts from cybersecurity platforms, identifying threats and coordinating remediation

Analyze EDR/SIEM telemetry, system logs, and forensic artifacts to determine attack root causes and assess incident scope

Perform dynamic malware analysis to identify malicious behavior, extract indicators of compromise, and assess suspicious files

Investigate attacker activity across Windows, Linux, and macOS environments, focusing on credential theft, lateral movement, persistence, and data exfiltration

Analyze suspicious activity in Microsoft 365 and Google Workspace environments, providing actionable recommendations to secure compromised accounts

Develop, refine, and optimize detection capabilities by creating and tuning security signals to improve alert quality and workflow efficiency

Support customer success by assisting security support teams with escalations and technical threat-related inquiries

Collaborate with Product and Engineering teams to enhance security products, detection mechanisms, and AI-assisted workflows

Continuously develop technical knowledge through real-world investigations, professional training, and responsible AI tool usage

Contribute to the cybersecurity community by sharing research, insights, and expertise through publications, webinars, blogs, and industry events

Technical Skills Required

MITRE ATT&CK Framework Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM)

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Benefits & Perks

Fully remote working arrangement from anywhere in Australia

Competitive annual base salary ranging from AUD 110,000 to AUD 140,000

Performance-based bonus and equity opportunities

Stock options available to all full-time employees

AUD 800 home office setup reimbursement

Monthly AUD 185 digital allowance and AUD 40 home-office technology stipend

12 weeks of paid parental leave

Subsidised private health insurance

Access to BetterUp for personal and professional development

Paid training and continuous technical development opportunities

Annual trip to the United States for company-wide Summer Summit

Supportive, inclusive, and collaborative international team environment

Job Description

We are looking for a hands-on Security Operations Analyst to join a globally distributed cybersecurity team dedicated to protecting businesses against increasingly sophisticated cyber threats. In this role, you will investigate active intrusions, analyse endpoint telemetry and forensic evidence, and help detect, contain, and remediate malicious activity. You will work with advanced EDR and SIEM technologies, contribute to threat detection improvements, and support incident response initiatives. Collaborating with Security Operations, Product, and Engineering teams, you will help strengthen security capabilities and improve customer protection. This is an opportunity to work on real-world cyber incidents, develop your technical expertise, and make a meaningful impact in a remote-first environment.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.