Security Operations Analyst

The Role

We’re looking for a Security Operations Analyst to support and strengthen security across Megaport’s. In this role, you’ll help monitor our security systems, investigate alerts, and respond to potential threats across our environment.

You’ll work closely with our security, infrastructure, and engineering teams to identify and analyze security situations, support incident responses, and help improve the tools we use daily. You’ll also be responsible for providing day-to-day security support across the business and helping ensure security best practices are kept.

This role is perfect for someone who enjoys problem-solving, is comfortable working in a fast-moving and global environment, and is passionate about cybersecurity.

What You’ll Be Doing

• Administer and operate security information and event management (SIEM) technologies and associated processes as a BAU function including the cultivation of cyber threat intelligence, threat models, and use-case and the implementation and refinement of detection rules.
• Onboarding of additional data sources to the SIEM, correlating data across diverse technologies and environments.
• Manage the response process and conduct end-to-end incident investigation. including analysis of attack artifacts to establish incident scope, impact assessment and containment strategies.
• Manage the technical vulnerability management process including monitoring of disclosure sources, evaluation of penetration test report, the use of vulnerability scanning solutions, and engaging IT system owners to assist with evaluation and remediation.
• Manage and support security solutions such as EDR, ZTNA and DLP.
• Go beyond finding security issues and work to provide solutions.
• Provide technical expertise regarding architecture and implementation design of new solutions.
• Provide general security support in the continued uplift and improvement of the environment.

What We Are Looking For - Some of the following

• Proficient English required, as this role involves regular written and verbal communication with global teams and stakeholders.
• Expertise in SIEM solutions within diverse physical and cloud environments.
• Working, up-to-date knowledge of potential exploits, attacker tools, techniques, procedures, and managing threat intelligence sources.
• Experience with native cloud security tools.
• Experience with vulnerability scanning solutions and best practices.
• Experience working with cloud network and application environments.
• Exposure to incident response processes, procedures, methods, and tools.
• Understanding of desktop and server operating systems.
• Experience with network security (e.g., firewall, IDS/IPS, routing, encryption).Experience with host-level security and hardening.
• Understanding of SDLC security practices.
• Current or past certifications (e.g., CC, Security+, relevant vendor certs).
• A keen interest in security and ongoing learning.

What We Offer

• Flexible working environments
• Birthday Leave
• 12 weeks parental leave (after 12 months continuous service), and 5 days of study leave.
• Creative, fun, and contemporary work environments
• Motivated team of industry experts and plenty of learning opportunities
• Celebrated success with internal awards programs
• Health and wellness program
• Generous performance bonus structure