Cyber Detection and Response Analyst, Asia Pacific at Control Risks

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

19 Oct, 26

Salary

0.0

Posted On

21 Jul, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Incident Response, SOC Operations, SIEM, EDR/XDR, Log Analysis, Threat Hunting, Malware Analysis, Forensic Investigation, Cloud Security, MITRE ATT&CK, NIST Framework, Threat Intelligence, Detection Tuning, Root Cause Analysis, Cyber Defense, Technical Communication

Industry

Business Consulting and Services

Description

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders. This role will be a part of a global 24/7 team and will cover one of two shifts: Sunday-Thursday 08:00-16:00 or Tuesday-Saturday 08:00-16:00. This role will likely commence employment in October 2026. Responsibilities: Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems. Support incident response activities including analysis, containment, remediation, and documentation. Execute established incident response playbooks and contribute to their continuous improvement. Perform threat hunting activities to identify potential compromises and gaps in detection coverage. Leverage threat intelligence to inform investigations and detection tuning. Collaborate with Security Engineering to tune detection logic and improve security controls. Produce clear, concise incident reports and support root cause analysis and remediation efforts. Support on-call rotations and escalation processes as part of a 24/7 detection and response capability. 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense. Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike). Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST. Familiarity with threat hunting, malware analysis, or forensic investigation techniques. Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred. Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly. Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus. Candidates will need to be be based in Australia and hold permanent work rights.

Responsibilities

The analyst is responsible for monitoring, triaging, and investigating security alerts across endpoint, network, cloud, and identity systems. They will execute incident response playbooks, perform threat hunting, and collaborate with Security Engineering to improve detection logic.