Cyber Security Analyst

Employment Type

Permanent

Closing Date

28 Oct 2026 11:59pm

Job Title

Cyber Security Analyst

Job Summary

The successful candidate will possess practical experience in Security Operations Centre, Incident Response, Cyber Defence, or Managed Security Services environments and be comfortable investigating security events, analysing threats, and responding to incidents across their lifecycle. In addition to operational delivery, the role is expected to contribute to continuous improvement initiatives, operational documentation, knowledge sharing, and service optimisation activities that enhance the maturity, efficiency, and effectiveness of the overall security operations capability.

Job Description

What you'll do:

• Monitor, triage, investigate and respond to cyber security events, alerts and incidents.
• Perform phishing analysis and response activities, including investigation, remediation and stakeholder communication.
• Support incident response activities across the full incident lifecycle, from detection through to recovery and lessons learned.
• Conduct threat analysis, threat hunting and security monitoring activities to identify and mitigate cyber risks.
• Develop and enhance detection capabilities through rule tuning, process improvement and operational optimisation.
• Contribute to continuous improvement initiatives focused on automation, efficiency, documentation and service maturity.
• Produce operational reports, investigation findings and technical recommendations for stakeholders.
• Collaborate with internal and customer teams to maintain service levels and improve security outcomes.
• Participate in knowledge sharing, mentoring and cross-skilling activities across the wider SOC team. Support the ongoing evolution and effectiveness of the Security Operations Centre capability.

About you:

You are technically curious and delivery-focused, and you enjoy working through customer security problems. You are comfortable contributing to both hands-on technical work and stakeholder-facing activities, and you can explain security concepts clearly to technical and non-technical audiences. You take direction well, ask good questions, and are motivated to grow into greater ownership over time.

Required Skills and Experience

• Demonstrated experience working within a Security Operations Centre (SOC), Cyber Defence, Incident Response, or Managed Security Services environment.
• Experience investigating and responding to cyber security alerts, incidents, phishing campaigns, and threat activity.
• Strong understanding of incident response methodologies, threat detection, and cyber security operations.
• Experience using enterprise security monitoring, SIEM, SOAR, EDR, and threat intelligence platforms.
• Strong analytical, investigative, and problem-solving skills, with the ability to assess and prioritise security events.
• Experience preparing technical reports, incident summaries, and recommendations for stakeholders.
• Ability to work effectively within a team environment while managing competing operational priorities.
• Strong written and verbal communication skills, with the ability to engage with both technical and non-technical stakeholders.
• Experience contributing to continuous improvement initiatives, including process optimisation, documentation, automation, and operational uplift.
• Familiarity with cyber security frameworks and best practices, including NIST Incident Response and ITIL Service Management principles.
• Experience operating within service-based environments with defined service levels, governance requirements, and customer expectations. Ability to work in a fast-paced operational environment supporting critical business services and cyber security outcomes.

Desirable Qualifications

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• Microsoft SC-200: Security Operations Analyst
• Splunk Core Certified Power User
• Splunk Enterprise Security Certified Administrator
• Splunk SOAR (Phantom) Certified Automation Developer or Administrator
• Microsoft SC-300 or equivalent Identity and Access Management certification
• ITIL Foundation Certification
• Relevant tertiary qualification in Cyber Security, Information Technology, Computer Science, Engineering, or a related discipline