Cyber Security Analyst

Salary: 85000

About us…

Since 1992, Device Technologies has been dedicated to improving patients’ lives through leading edge technology and services, supplying hospitals and healthcare professionals with high-calibre medical solutions from around the world. Over 30 years, Device Technologies has developed a reputation for the quality, dedicated service and ongoing support provided by our people. With HQ in Sydney, the company continues to grow, representing over 200 trusted brands, and employing over 1000 highly skilled staff located across Australia, New Zealand and Asia.

Geared towards optimal performance, our culture is built on empowering our people to achieve their goals, aligning with wider business objectives. We focus on productivity, continuous improvement, career development and leadership nurturing to foster a superior workforce.

The opportunity…

Join a team of Cyber Security Analysts. You will be responsible for the development, implementation, and operation of our cyber security practices, protecting our technology systems and information assets. The team is responsible for the operation, and continual improvement, of our security practices and insure they are incorporated into our way of working to deliver secure solutions to our business and our customers.

This role is responsible for monitoring and responding to security alerts and incidents, implementation and operation of security controls, assisting with risk and control assessments, helping to foster security awareness through the business, and supporting initiatives to uplift our security maturity as the business scales and expands globally.

About you...

At Device Technologies, we succeed through our commitment to five key values:

Delivering Innovation - We constantly seek new ideas, technologies, and approaches to meet evolving customer needs and market demands. Through our innovation we continually adapt and transform for our people, our customers and our future success.

Seeking Collaboration - By embracing collaboration we tap into diverse perspectives, skills, and resources to drive innovation, solve complex problems, and achieve common goals.

Taking Ownership - We embrace accountability and initiative. It fosters trust, collaboration, and empowers our people to drive success through proactive responsibility.

Practising Good Business - We strive to embody integrity, responsibility, and sustainability. It involves ethical conduct, transparency, and a commitment to social and environmental stewardship.

Championing the Customer - By placing customers at the heart of decision-making and operations, we enhance experiences, foster loyalty, and collectively strive to improve patient outcomes.

Our ideal candidate for this role aligns with these values.

We are looking for a candidate with a strong background across multiple information security domains such as, but not limited to, endpoint security, network security, IDS/IPS, data loss prevention, vulnerability management, incident response, threat hunting, identity and access management, and application security.

• Investigate and utilise new technologies and processes to enhance security capabilities and implement improvements.
• Develop and maintain procedures to efficiently deliver Systems Security testing services.
• Create new ways to solve existing production security issues.
• Collaborate on the definition, implement and maintenance of corporate security policies.
• Proactively conduct hands-on security assessments on systems and infrastructure equipment, identify security vulnerability/weaknesses, evaluate countermeasures, and recommend best security practices to mitigate the vulnerabilities.
• Review the results and recommend effective remediation of a vulnerability scan, penetration test and compliance reports.
• Participate and recommend security controls for IT and Systems related projects.
• Participate in the information security incident management process.
• Develop and maintain regular information security reports for managers and team.
• Assist with the development and promotion of a meaningful Systems Security Awareness Program
• Stay informed about the latest developments in the information security field, including new mitigation techniques and services;

Experience required:

• Understanding of secure systems architectures;
• Knowledge of Identity and access management principles;
• Passionate about information security with a strong commitment to continuously improve user experience outcomes;
• Experienced in incident handling for internal and advanced threats;
• Experienced in EDR, web proxy, vulnerability scanning, security monitoring, threat intelligence, and security analytics tools;
• Infrastructure Security Hardening (Systems & Infrastructure) based on Industry Best Practices;
• Systems Security Experience, Strong understanding of operations systems; Windows, Linux, etc. and communication protocols running on various layers of the OSI stack;
• Knowledge of network fundamentals; e.g., Local Area Networks, TCP/IP, IPSEC, and high-level communication protocols;
• Solid understanding of security standards such as ISO27001, NIST, PCI-DSS, PII, Essential 8, MITRE ATT&CK and ISM (desirable);
• 2+ years of IT security experience, coupled with a degree in Computer Science, appropriate industry applicable certifications (e.g. CISSP, SSCP, GIAC, CEH, OSCP);
• Self-driven and motivated, with a team/collaborative style;
• Demonstrable high level of interpersonal skills and customer focus.

Interested?

To apply for this opportunity, please click on the 'apply' button to be redirected to our candidate application portal.

At Device Technologies we are motivated by the opportunity our equipment provides to change people’s lives. We have a clear vision to ensure all our people feel valued and respected, can be themselves and can flourish as contributors to the success of our business.

Our promise is all qualified applicants will receive consideration for employment without regard to diversity of race, gender, sexual orientation, religion, ethnicity, disability, age and all the other wonderful characteristics that make us different.

Please note: Device Technologies will undertake pre-employment checks via our accredited background check provider for the successful candidate to ensure that Device Technologies is meeting legislative obligations and the information a candidate provides is accurate. For all roles, an offer of employment will be subject to the following pre-employment checks: identity check, reference checks, right to work in location (checks for visa holders), police integrity. By proceeding and applying for the role, you acknowledge our hiring process and agree to undertake the required pre-employment checks if successful.

It is also a mandatory requirement for certain roles within our organisation, where the successful applicant may be required to present certifications and/or vaccinations status as per role requirements. Evidence of certificates or vaccination status will be requested during the interview process by management to qualify fit for role and prior to any offer.

Agency Disclaimer

Device Technologies does not accept unsolicited resumes from recruitment agencies or third parties. In the absence of a current, written and executed recruitment agency agreement, any resumes submitted to Device Technologies will be deemed unsolicited, and no fees or charges will be payable. Device Technologies reserves the right to engage, interview or employ any candidate submitted in this way without incurring any obligation to the submitting agency or third party.