Security Operations & Incident Response Analyst

On-site Full-time Not specified Security

Job Description

About MegaportWe're not your typical tech company - and we don't want to be. Megaport is the global leader in Network as a Service (NaaS), and has transformed the way businesses connect to the cloud, data centers, and each other. We're publicly listed on the Australian Stock Exchange and partnered with the biggest names in tech like Amazon, Microsoft, Google, Oracle, IBM, and more. Headquartered in Brisbane with a crew of over 600 people spread across Asia-Pacific, Europe, and the Americas, our employees enjoy an environment that is collaborative, supportive, and (actually) fun. Our Team CultureWe're a team of problem solvers, pixel pushers, code slingers, and cloud fanatics. Culture is more than a poster on the wall here - collaboration beats hierarchy, curiosity fuels our growth, and everyone's voice matters. We take our work seriously, but not ourselves. We work across time zones to execute on our global vision, trust each other to get things done, and never compromise our values for commercial gain. Most importantly, we place our customers at the center of everything we do. We're committed to increasing representation in the tech industry and welcome applicants from all backgrounds. Don't meet every requirement? That's okay. If you're excited about this role, we encourage you to apply.
The Role

We're looking for aSecurity Operations Analyst to support and strengthen security across Megaport's. In this role, you'll help monitor our security systems, investigate alerts, and respond to potential threats across our environment.

You'll work closely with our security, infrastructure, and engineering teams to identify and analyze security situations, support incident responses, and help improve the tools we use daily. You'll also be responsible for providing day-to-day security support across the business and helping ensure security best practices are kept.

This role is perfect for someone who enjoys problem-solving, is comfortable working in a fast-moving and global environment, and is passionate about cybersecurity.

What You'll Be Doing

• Administer and operate security information and event management (SIEM) technologies and associated processes as a BAU function including the cultivation of cyber threat intelligence, threat models, and use-case and the implementation and refinement of detection rules.
• Onboarding of additional data sources to the SIEM, correlating data across diverse technologies and environments.
• Manage the response process and conduct end-to-end incident investigation. including analysis of attack artifacts to establish incident scope, impact assessment and containment strategies.
• Manage the technical vulnerability management process including monitoring of disclosure sources, evaluation of penetration test report, the use of vulnerability scanning solutions, and engaging IT system owners to assist with evaluation and remediation.
• Manage and support security solutions such as EDR, ZTNA and DLP.
• Go beyond finding security issues and work to provide solutions.
• Provide technical expertise regarding architecture and implementation design of new solutions.
• Provide general security support in the continued uplift and improvement of the environment.