{"id":3338888,"url":"https://alion.io/job/medibank-cyber-defence-analyst","title":"Cyber Defence Analyst","company":{"id":1859453,"name":"Medibank","domain":"medibank.com.au","url":"https://alion.io/company/medibank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":97,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":147000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-27T14:49:58Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T16:28:35Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"At Medibank Group, our brands, Medibank, ahm and Amplar Health, are united by a shared purpose: creating the best health and wellbeing for Australia. We're building a workplace where people can thrive, grow and make a meaningful impact, while helping shape a healthier future for our customers, patients and communities.\nWe’re looking for a Cyber Defence Analyst to join our Cyber Defence Team and support the day-to-day identification, investigation and response to security threats.\nIn this role, you’ll work across security alert analysis, incident investigation and threat hunting, applying your understanding of attacker behaviour and the MITRE ATT&CK framework to help identify and respond to potential threats.\nWorking alongside senior analysts and specialists, you’ll contribute to the effectiveness and reliability of the cyber defence function while continuing to develop your capability across security operations.\nThe Responsibilities:\nMonitor, triage and investigate security alerts across endpoint, identity, network and cloud telemetry.\n\nPerform initial incident analysis to understand scope, severity and potential impact.\n\nEscalate complex or high-risk activity to senior analysts or incident responders with clear supporting evidence.\n\nApply your knowledge of attacker tactics, techniques and procedures when analysing alerts and incidents.\n\nUse the MITRE ATT&CK framework to categorise activity, support investigations and understand attack progression.\n\nSupport the maintenance, improvement and tuning of existing detections.\n\nParticipate in threat hunting activities and supporting control uplift activities.\n\nMaintain clear investigation notes, timelines and findings.\n\nCollaborate with incident response, IT and security engineering teams as required.\n\nAbout you:\nA minimum of 4 years’ experience in security operations, cyber defence or a related role.\n\nExperience with detection-as-code, threat hunting or working within a 24×7 SOC or enterprise security operations environment.\n\nStrong experience performing security alert triage and incident investigations.\n\nExperience in one or more of the following:\n\nMicrosoft Security Suite\n\nSplunk / Falcon NGSiem\n\nCrowdStrike Falcon Suite\n\nEmail, Endpoint, identity, network or cloud telemetry.\n\nWorking knowledge of common attack methodologies and adversary behaviour.\n\nFamiliarity with the MITRE ATT&CK framework and its use within security operations.\n\nExperience using one or more SIEM or EDR platforms.\n\nStrong analytical skills and attention to detail with ability to work independently on assigned tasks while following established processes.\n\nEntry or intermediate security certifications such as Security+, BTL L1/L2 or GCIH are also desirable.\n\nWhy work for Medibank Group?\nAt Medibank Group, we're creating Australia's healthiest workplace by putting the health, wellbeing and success of our people at the centre of everything we do. We know that when people feel supported, connected and empowered to be themselves, they do their best work.\nThat's why we invest in flexible ways of working, career growth, wellbeing support and meaningful experiences that help our people thrive both professionally and personally.\nTo learn about what’s in it for you, visit https://careers.medibank.com.au/the-medibank-experience\nBe Yourself. Belong Here\nWe’re committed to a workplace where everyone feels safe, supported, and free to be themselves. By embracing diverse perspectives, we challenge the status quo and uncover better ideas. You can confidently bring your whole self-because your unique voice is what makes us stronger.\nWe welcome and encourage applications from people of all backgrounds, identities and lived experiences, including Aboriginal and Torres Strait Islander peoples, people from culturally and linguistically diverse backgrounds, LGBTQIA+ communities, people with disability, neurodivergent people, and carers.\nOur employee networks create space for connection, advocacy and allyship. We offer flexible ways of working to support inclusion, accessibility and wellbeing.\nIf you need adjustments or alternative formats at any stage of the recruitment or employment journey, we’re here to help. You can let us know directly in the application form, or if you’d prefer to discuss before applying, please reach out to us  or (03) 8622 5666. Learn more about our commitments and employee stories at https://careers.medibank.com.au/diversity-inclusion/ (please copy and paste the URL onto your browser)\nMedibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work","description_format":"text","description_chars":4605,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Incident Response","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-27T14:49:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":21,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/medibank-cyber-defence-analyst","json_url":"https://alion.io/job/medibank-cyber-defence-analyst.json","meta":{"generated_at":"2026-10-30T21:17:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11650,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1859453},"rest":"https://alion.io/mcp/rest/get_company?id=1859453"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmedibank-cyber-defence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmedibank-cyber-defence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmedibank-cyber-defence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/medibank-cyber-defence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmedibank-cyber-defence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3338888}},{"tool":"search_jobs","arguments":{"company":"medibank.com.au","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3338888},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}