Role: Security Incident Responder
Location: Melbourne , Australia
Duration: 6+ Months
Role Description:
This role exists to execute the cyber-security incident detection and response function within Security Services. The role is also responsible for contributing to the on-going maturity of the team, processes and frameworks.
The role requires strong technical skills and experience in incident detection and response.
Accountabilities:
- Respond to cyber-security threats, vulnerabilities, events and incidents
- Act as technical contributor during major security incidents
- Contribute to improvement in the team’s capability, including:
- Operational maturity, including processes/methodologies, playbooks, automation, efficiency, quality
- Detection strategies, including attack models, use cases, tuning, R&D
- Mitigation strategies, including proactive planning, new controls, optimising existing controls
- Participate and contributing to the planning and executing of purple teaming activities
- Meet team operational metrics
- Maintain an up-to-date knowledge of cyber threats
- Drive continuous learning and knowledge sharing within the team
- As required, support internal stakeholders and projects
- Work in a ‘business hours + rostered on-call’ environment
- Other related activities as required by Management or Cyber Response Leads
Essential capabilities
Good understanding and experience with:
- Incident response methodologies and techniques
- Detection and mitigation strategies for a broad range of cyber threats, including malware, DDOS, hacking, phishing, lateral movement and data exfiltration
- Common cloud platforms/technologies, such as Azure, AWS and Google cloud
- Common enterprise technologies, such as Windows, Linux, Active Directory, DNS, DHCP, web proxies, SMTP, TCP/IP
- Malware analysis and reverse engineering, including dynamic and static analysis
- Operational usage of common analysis and response tooling, including Splunk, Crowdstrike, Microsoft Defender, FireEye, Akamai, etc
- Performing vulnerability assessments and penetration testing, including network, infrastructure and application exploitation
The Lockheed Martin Cyber Kill Chain™ or similar methodologies
Key Skills
Ranked by relevance
Related Jobs
3 roles aligned with this opportunity
Project Manager | Remote
2026-05-27
Security Consultant - Data Security
2026-05-27
Network Administrator
2026-05-27
- Posted
- Nov 11, 2024
- Type
- Contract
- Level
- Mid-Senior
- Location
- Melbourne
- Company
- CareCone Group
Industries
Categories
Related Jobs
3 roles aligned with this opportunity
Project Manager | Remote
2026-05-27
Security Consultant - Data Security
2026-05-27
Network Administrator
2026-05-27