Job no: 4970

Category: IT Services

• Are you a passionate cyber security analyst ready to take on a dynamic challenge?
• Join a collaborative team driving proactive cyber defence and continuous improvement
• Permanent position with flexible working based in Leederville – from $115,561 + 12% super (up to 16% co-contribution)

At Water Corporation we're shifting our focus to the next phase of our strategic plan - building on strong foundations to strengthen capabilities, modernise systems, and accelerate innovation across the business. This phase is about elevating how we deliver technology services: making them faster, more responsive, and more closely aligned to the needs of our people, our operations, and our customers. To support this evolution, we're recruiting for key roles that will be pivotal in strategically shaping a modern, collaborative, and customer‑centric Information & Technology Group. If you're excited about leading innovation, finding smarter ways of working, and making a meaningful impact, now is the perfect time to join us. 

Real benefits that matter 

• Real flexibility with options to work from home, flexible work hours 
• An additional 2 well-being days each year 
• Access to long service leave pro rata after 3 years of service 
• Generous co-contribution superannuation scheme, which offers up to 16%. This includes an 12% standard employer contribution, plus an additional 2% employer co-contribution that matches your own 2% contribution 
• Purchase additional leave of up to 12 weeks 

Discover more benefits we offer to support the unique and individual ways our employees live. 

About the role 

The Analyst – Cyber Security (Threat Defence) plays a key role in safeguarding our environment through advanced threat detection, incident response, and vulnerability management. You will coordinate real-time identification, analysis, and remediation of security threats, leveraging risk-based processes and automation to strengthen our cyber resilience. Working closely with stakeholders, you will ensure security policies, standards, and controls are effectively implemented and continuously improved. 

This role is integral to our Cyber Threat Defence function, supporting initiatives such as threat hunting, SIEM/SOAR optimisation, vulnerability identification and analysis, and governance activities. You will champion cyber awareness and contribute to operational improvement projects aligned with our improvement roadmap.

What the role will involve: 

• Lead day-to-day analysis of security events and act as the primary contact for our Managed SOC provider. 
• Coordinate incident response and recovery activities across resolver groups, ensuring timely remediation. 
• Operate and optimise SIEM and SOAR platforms (Splunk) for detection and automation. 
• Conduct threat analysis, vulnerability assessments, and proactive threat hunting. 
• Support continuous improvement initiatives such as dashboard development, detection tuning, process automation and playbook development. 
• Collaborate on governance activities, policy reviews, and cyber awareness programs. 
• Provide technical guidance for projects, ensuring alignment with security standards and ACSC recommendations. 

Key skills and experience: 

• Tertiary qualifications in an IT or Cyber Security discipline and/or significant industry experience. 
• Strong knowledge of security technologies, frameworks (NIST, ACSC), and MITRE ATT&CK. 
• Hands-on experience with SIEM (Splunk), SOAR, vulnerability management tools (Tenable), and EDR/XDR platforms (CrowdStrike, Microsoft Defender XDR). 
• Demonstrated capability in incident response, incident management, threat analysis, and threat hunting. 
• Familiarity with logging and monitoring strategies, detection engineering, and automation workflows. 
• Excellent problem-solving and risk analysis skills with a proactive approach to continuous improvement. 
• Strong interpersonal and stakeholder engagement skills, with the ability to influence outcomes. 
• Scripting, automation and CI/CD (Python, PowerShell, Terraform, CloudFormation) experience will also be considered highly but is not essential for the role. 
• Industry certifications highly regarded, such as: 
  • GIAC certifications (e.g., GCIA, GCIH, GCFA) 
  • CompTIA Security+ or CySA+ 
  • Certified Ethical Hacker (CEH) 
  • Splunk Certified Power User / Admin 
  • AWS/Azure Security Specialty 
•