FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cyber Security Analyst
Orro Group. Investigate SIEM events and own incident response from triage through escalation to resolution .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response and detection rule tuning within enterprise-scale security operations, leveraging tools like Microsoft Sentinel, SentinelOne, and Splunk. Possesses strong analytical skills to assess risks and communicate technical details effectively to diverse audiences.
Highest-signal resume keywords
Incident ResponseDetection Rule TuningMicrosoft SentinelSIEM ToolsMITRE ATT&CK
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseDetection Rule TuningSIEMXDREDRMicrosoft SentinelSplunkLinuxUnixVulnerability Management
Soft Skills
CommunicationCollaborationAnalytical Thinking
Tools & Technologies
Microsoft SentinelSentinelOneSplunkRapid7TenableQualys
Certifications & Qualifications
SC-200Blue Team Level 1Blue Team Level 2SANS Incident ResponderGIAC GCDA
Industry Keywords
Security OperationsPhishing AnalysisLogging GapsNISTISO 27000
Tech Stack
Tools & technologiesCloudLinuxSplunkUnix
About the role
Key responsibilities & impact- Investigate SIEM events and own incident response from triage through escalation to resolution
- Analyse phishing activity, suspicious domains and IP addresses to identify genuine risk
- Author reliable detections for defined behaviours across Microsoft Sentinel, SentinelOne and Splunk
- Apply thresholds, aggregation and suppression to detection rules
- Tune routine rules to reduce false positives without losing true positives
- Document the rationale behind detection rules
- Build detections aimed at each customer's stated risks and most critical assets
- Explain detection logic in business terms
- Audit customer logging against intended coverage
- Identify concrete logging gaps and explain their impact
- Work across daily operations, detection and continuous improvement for a broad customer base
- Collaborate with fellow analysts, threat hunters and customer stakeholders remotely and onsite
Requirements
What you’ll need- 3 or more years in an enterprise-scale security operations environment, including hands-on incident response
- Hands-on experience with modern detection and response tooling, including SIEM, XDR and EDR
- Experience writing or tuning detection rules in Microsoft Sentinel, SentinelOne or Splunk, using their query languages
- Solid grounding in Microsoft security technologies
- Confidence working across Linux or Unix environments
- Working knowledge of MITRE ATT&CK, NIST and ISO 27000
- Ability to explain technical detail to technical and non-technical audiences
- Current certifications such as SC-200, Blue Team Level 1 or 2, SANS Incident Responder or GIAC GCDA are bonus points
- Broad understanding of cloud, networking and firewall technologies is a bonus
- Experience with vulnerability management tooling such as Rapid7, Tenable or Qualys is a bonus
- Unrestricted right to work in Australia
- Applicants must undergo state and federal police background checks
- Visa sponsorship is not available
Benefits
Comp & perks- Competitive base salary plus superannuation
- Benefits
- Public holiday swaps supporting family and cultural diversity
- Generous parental and caregiver leave
- Flexible work options
- Company-wide mentoring
- Emerging Leaders Development Program
- 3 days of paid volunteer leave each year
- Novated leasing
- Employee discounts
- Full access to a wellbeing platform with expert fitness plans, nutrition tips, and wellness tools