{"id":3407105,"url":"https://alion.io/job/amwins-cyber-security-analyst","title":"Cyber Security Analyst","company":{"id":669508,"name":"Amwins","domain":"amwins.com","url":"https://alion.io/company/amwins","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":15,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":40000,"max_usd":114000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-10-28T13:37:04Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-03T13:37:18Z","board_verified":false,"closed_at":"2026-11-03T13:37:18Z","days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"Cyber Security Analyst\nThe Cybersecurity Analyst is a member of the Cybersecurity department, supporting the newly formed Amwins Australasia Division. The analyst serves as the first line of defense in security event monitoring, working to detect and mitigate threats to the organization. Using Microsoft Defender XDR and other security tools, the analyst monitors for security events, responds to security related service requests from users, and conducts in depth analysis of logs and security alerts to identify potential threats.\nThe Analyst works closely with internal teams to ensure effective containment and eradication, helps build repeatable security processes within the Security team, and assists with projects and tasks as directed. Most importantly, they build relationships to increase the security mindset of the organization through collaboration.\nThis role is built for someone with a natural curiosity and a genuine passion for cybersecurity: a person who keeps learning as threats, tools, and techniques evolve, including how AI can make detection and response faster and more effective.\nResponsibilities\nMonitor, triage, and respond to security events and alerts using Microsoft Defender XDR and related security tools, serving as the first line of defense against security threats.\nConduct in-depth analysis of logs, network traffic, and security alerts to identify potential threats, using Kusto Query Language (KQL) for investigation and proactive threat hunting.\nApply AI-assisted capabilities to accelerate alert triage, investigation, enrichment, and response, validating AI-generated output.\nFacilitate security event response and containment during a Security Incident and coordinate response and recovery efforts with other members of the team and internal partners to ensure effective containment and eradication.\nRespond to and resolve security related service requests from users.\nEscalate identified risk to the Technology Risk and Compliance program as well as Senior Management.\nMake recommendations to enhance the effectiveness of controls.\nCreate and update process documentation as needed and assist with the creation of security processes to establish repeatable practices within the Security team.\nCreate reporting, as directed, to ensure effective security operations.\nStay current on emerging threats, adversary techniques, and security tooling, and share what is learned with the team to continuously improve detection and response.\nMaintain well documented cases for case/shift handoff to support a follow-the-sun operating model.\nQualifications, Skills, and Experience\nExperience: 2-3 years of minimum experience in a security operations, incident response, or related IT role.\nTechnical Skills: Hands-on experience with Microsoft Defender XDR (Endpoint, Identity, Cloud Apps) and Microsoft Sentinel; working proficiency in KQL and advanced hunting; understanding of the incident response lifecycle, MITRE ATT&CK, SIEM and XDR concepts, Windows and Active Directory/Entra ID, networking fundamentals, and cloud security. Scripting or automation experience (PowerShell, Python) is a plus.\nBias for Action: Moves quickly from alert to action, making sound decisions with the judgment to know when to escalate\nAI in Security Operations: Working knowledge of applying generative AI and AI-assisted tools to security operations, such as alert triage, query development, incident summarization, and enrichment, with the judgment to validate outputs.\nCuriosity and Passion: A natural curiosity and genuine passion for cybersecurity, demonstrated through self-driven learning such as maintaining a home lab and participating in CTF events with a desire to understand how and why attacks work.\nCommunication and Collaboration: Clear written and verbal communication, including disciplined case documentation and shift handoff. The ability to document processes and escalate risk effectively. Comfort collaborating across time zones in a follow the sun team.\nThe Amwins Advantage: Benefits & Perks Available to Full-Time US Based Employees\nMedical, Dental, Vision available your first day of employment\nChoice of medical plans through Blue Cross Blue Shield; Kaiser available for CA employees\nMental health support including:\nVirtual therapy\nDigital coaching\n24/7 EAP counseling\nCompany-paid Basic Life & AD&D Insurance, Short-Term Disability, and Employee Assistance Program\nHealth Savings Account with company contributions \nHealth Care FSA, Dependent Care FSA, and Commuter Benefits\nParental Leave and Adoption Assistance\nVoluntary coverage options:\nLife Insurance\nCritical Illness\nAccident\nIdentity Theft Protection\nRetiree medical benefits available for Medicare-eligible retirees\n401(k) with company match\nGenerous Paid Time Off and Company Holiday Schedule\nCollaborative, continuing education focused work environment\nCareer advancement opportunities","description_format":"text","description_chars":4893,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Health Insurance & Benefits","Insurance Brokers & Agencies"],"lifecycle":[{"event":"open","at":"2026-10-28T16:34:45Z"},{"event":"close","at":"2026-11-03T13:37:18Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/amwins-cyber-security-analyst","json_url":"https://alion.io/job/amwins-cyber-security-analyst.json","meta":{"generated_at":"2026-11-04T12:16:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18449,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669508},"rest":"https://alion.io/mcp/rest/get_company?id=669508"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famwins-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famwins-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famwins-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amwins-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famwins-cyber-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3407105}},{"tool":"search_jobs","arguments":{"company":"amwins.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3407105},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}