Security Operations Analyst
Brennan IT Intranet · Brisbane, Brisbane Region ·
- Category
- Security
- Experience
- 1+ years
Brennan. Where true performance thrives.
At Brennan, we believe that how technology is delivered is every bit as important as what the technology is. We focus on creating real and relevant value for customers with solutions that fit their specific needs and always reflect their true interests. It’s a claim backed by our True Performance System – a way of working engineered to get us closer, and deliver better, for our customers and their actual experience of technology.
Why join Brennan
True performance for our customers starts with a true belief in our people.
It’s why we’ve structured our business to help our teams, and their talents, shine bright. It's why we’ve created a workplace where people of all backgrounds, beliefs and experiences are welcomed and empowered. And it’s why we’ve built an organisation where real innovation makes a genuine impact and generates true rewards for our team members.
True rewards
In addition to competitive remuneration, Brennan offers extensive benefits, including:
- Training and certification bonuses
- Culture Awards that recognise excellence
- Brennan Daredevils – our annual, all-expenses paid trip awarded to our top performers and outstanding contributors
- Vibrant, fun social activities
- Discounted hardware and software
- An environment that embraces learning and development
We are looking for a Security Operations Analyst to join our Cyber Security team in Brisbane. Standard business hours apply, with participation in an on-call roster as required.
This role is ideal for someone who has already started their cyber security career and is looking to further develop their skills within a collaborative Security Operations environment. We are seeking candidates with 1-2 years of experience in cyber security, SOC operations, alert triage, incident response, or a related security-focused role.
You will work alongside experienced Cyber Security professionals, supporting security monitoring, threat detection and incident response for a range of sovereign and government-focused customers. This is an excellent opportunity to gain exposure to industry-leading security technologies while continuing to build your technical and investigative skills.
Please note: Applicants must be Australian Citizens and eligible to obtain NV1 Security Clearance.
Key Responsibilities:
- Monitor, triage and investigate security alerts across Endpoint (EDR/XDR), Email Security, Identity and SIEM/SOAR platforms
- Analyse security events and incidents, escalating complex threats and security concerns when required
- Support incident response activities, including containment, investigation and remediation efforts
- Assist in the delivery of Security Operations Centre (SOC) services for a range of customers
- Document incidents, findings, recommendations and operational procedures
- Support the implementation and ongoing management of security controls and security technologies
- Collaborate with security engineers and senior analysts to improve detection capabilities and security outcomes
- Assist with threat hunting, security reviews and continuous improvement initiatives
- Build positive working relationships with customers and internal stakeholders
- Maintain and develop your cyber security knowledge through ongoing learning and training
- 1-2 years of experience in cyber security, SOC operations, alert triage or incident response
- Australian Citizenship and eligibility to obtain NV1 Security Clearance
- Experience working with security alerts, threat monitoring or cyber security tool
- Strong troubleshooting and problem-solving skills
- Excellent communication skills and attention to detail
- Strong documentation and analytical skills
- Curiosity and a willingness to learn in a fast-paced security environment
- Relevant cyber security certifications such as Security+, SC-900, SC-200, AZ-500 or similar are highly regarded
- Understanding of phishing attacks and email security concepts
- Knowledge of identity and access management principles, including MFA and conditional access
- Understanding of malware, ransomware and common cyber threats
- Familiarity with endpoint security solutions such as Microsoft Defender, CrowdStrike, SentinelOne or similar
- Exposure to SIEM and security monitoring platforms
- Understanding of cyber security frameworks and best practices
- Microsoft 365 and cloud security fundamentals
- Basic incident response and security investigation concepts
Brennan is an equal-opportunity employer