• Develop and document detection and alerting use cases specific to the Department’s IT environment and threat model.
• Implement and tune custom detections and analytics rules based on developed use cases in Microsoft 365 Defender and Microsoft Sentinel.
• Develop knowledge articles, playbooks and procedures to support incident response activities based on use cases and the Department’s IT environment.
• Collaborate with security engineers, infrastructure teams, system owners, and application development teams to develop and implement system-specific security monitoring approaches.
• Determine and drive team priorities, including implementation of toolsets and ingestion of log sources, to improve capability.
• Lead major and critical incident response investigations.
• Action escalated and complex security alerts and incidents.
• Mentor and lead other Cyber Security Analysts within the team.
• Provide advice and support to the Director, Cyber Operations and Executives as required.

The candidate requirements
Essential criteria:

• Demonstrated experience as a Senior Cyber Security Analyst working in Security Operations Centre, including detection engineering and incident response responsibilities.
• Demonstrated skills and experience in Microsoft Sentinel and Defender products, including responding to alerts and incidents and developing custom detections and analytics rules
• Demonstrated experience in working with and investigating security log from different platforms and devices
• Demonstrated experience in strengthening the maturity of a SOC.

Desirable criteria: 

• Experience facilitating incident response simulations.
• Experience utilising threat intelligence services and tools to inform detection engineering and enrich alerts and incidents

If you would like to look at our other unlisted roles, you can find them at: https://gatewaysynergy.com.au/careers/

You must submit a CV on application prior to a phone call and be prepared to sign a nondisclosure. Feel free to call thereafter on the following 0482 074 845

The position reports to the Assistant Director, Server Team. In this role you will be working within the infrastructure team, to deliver positive outcomes for the day-to-day matters relating to the support of the department’s systems. This is an exciting opportunity to make a significant contribution to the delivery of the department’s events and day to day operations through an improved maturity of the systems.

The role will be responsible for, but not limited to:

• Work effectively across teams to provide systems expertise to enhance and improve existing solutions, including designing, developing, implementing, and testing solutions, in line with business requirements and software development standards.
• Support and maintain the department’s Standard Operating Environments and end user device management.
• Ensure deadlines are consistently met and that a high standard of technical and design documentation is provided.
• Work collaboratively with other teams to investigate and resolve complex issues with the operation of infrastructure and infrastructure as code.
• Contributing to the documentation of the department’s systems.
• Contribute to providing On-call support for the department’s infrastructure and systems.
• Perform additional duties or assume responsibility of functions as directed from time to time or during an event.

The candidate requirements
Essential criteria:

• Demonstrated knowledge and experience in implementing enterprise IT solutions based on-premises and utilising cloud services.
• Demonstrated knowledge and experience in deploying, testing, and maintaining an enterprise sized ICT environment.
• Demonstrated knowledge of risk management principles and processes in context of Infrastructure management.
• Demonstrated experience with managing and migrating solution infrastructure to the Azure platform.
• Demonstrated ability to build and maintain effective working relationships across all levels and influence key stakeholders.
• Ability to communicate with influence and manage stakeholder relationships.
• Demonstrated personal drive and integrity whilst achieving results within legislative and budget parameters.

Desirable criteria:

• Relevant qualifications in IT, including cloud certification
• Demonstrated knowledge of Australian IT Cyber security frameworks
• Demonstrated knowledge of IT frameworks, such as ITIL and TOGAF
• Demonstrated knowledge of the Commonwealth frameworks, including ICT frameworks

If you would like to look at our other unlisted roles, you can find them at: https://gatewaysynergy.com.au/careers/

You must submit a CV on application prior to a phone call and be prepared to sign a nondisclosure. Feel free to call thereafter on the following 0482 074 845