Cybersecurity Analyst - Level 1

at  Datacom

Our Why
Datacom works with organisations and communities across Australia and New Zealand to make a difference in people’s lives and help organisations use the power of tech to innovate and grow.
Our team
Datacom operates three Cybersecurity Defence Operations Centres (SOC’s) in Wellington, Auckland, and Brisbane from where we provide our managed SIEM and our full stack of Cybersecurity services.
Our Cybersecurity Defence Operations Centre is a well-established team made up of Cybersecurity Analysts, Engineers, Devops Engineers and Incident Responders who have been managing customers, both commercial and government, for over 10+ years. We are a matured operational team that not only responds to security events, incidents, and triggers, but a fully-fledged operational team that hunts for anomalous, suspicious, and potentially unwanted activities within our customers environments.
We partner with industry leaders to provide our services and to provide you with a broad technical skillset, certifications and experience.
About the Role (Your Why)
We are looking for Level 1 Cybersecurity Analysts with at least 1 year working with Security Tools and Frameworks and have been working in IT for the at least 2 years.
The core objectives and responsibilities of the Cybersecurity Analyst - Level 1 include analysing security events of interest. The analyst is responsible for overseeing incidents from initiation through to resolution and identifying opportunities for alert refinement. By utilising defensive measures and insights gathered from diverse sources, the Cybersecurity Analyst identifies, analyses, and reports on events transpiring or potentially unfolding within the network. This proactive approach aims to safeguard information, information systems, and networks from potential threats.

• Action regular tasks and processes
• Review and respond to alarms/tickets
• Incident response investigation
• Handle Events of Interest escalations
• Initial triage
• Security event analysis
• Log and escalate tickets
• Identify policy changes required based on analysis
• Security use case and correlation rule development
• Threat hunting
• Detect security breaches and adhere to incident response protocols
• Evaluate existing security risks and implement enhancements
• Conduct research on security improvements and provide recommendations to customers
• Stay up-to-date on latest Security trends and standards
• Participate in incident response planning and execution