Junior Security Operations Analyst

Job description

Primary Location VIC - Melbourne - 655 Collins St Job Description Summary Junior Security Operations Analyst Full Time, Permanent Location: Level 4, 655 Collins Street, Docklands VIC 3008 Salary: $85,000 – $95,000 per annum plus superannuation About the Role Service Stream is seeking a motivated Junior Security Operations Analyst to join our growing ICT team. In this role, you will help strengthen Service Stream’s cyber security defences by responding to security and identity-related threats and alerts, investigating incidents, supporting identity and access management activities, and assisting with security improvements across the organisation. You will work closely with technical teams and stakeholders to prioritise and remediate security risks in a timely and effective manner while maintaining service continuity and following ITIL best practices and Service Stream policies and procedures. Key Responsibilities In this role, you will: Investigate and assist with the resolution of security incidents, including identity-related incidents. Support the effective provisioning and de-provisioning of access to IT assets in accordance with Service Stream policies, standards and procedures. Maintain accurate records within Service Stream's identity and access management environment, including Active Directory, Azure Active Directory and single sign-on systems. Support role-based access controls and undertake regular access reviews to ensure compliance with security standards and regulatory requirements. Maintain and improve documentation, processes, procedures, standards and guidelines relating to identity and access management. Assist with building security dashboards and automation capabilities using Splunk and other security platforms. Support security improvement initiatives by identifying, analysing and assisting to remediate vulnerabilities and security findings. Monitor and respond to security alarms, triggers and threshold warnings, with a focus on security and system availability. Liaise with internal subject matter experts, vendors and suppliers to support security enhancements, troubleshooting and issue resolution. Identify opportunities to improve efficiency through automation and scripting. About You To be successful in this role, you will bring strong analytical and problem-solving skills, a genuine interest in cyber security and an understanding of end-to-end identity and access management and security lifecycle processes. You will be a collaborative team player who can communicate effectively with a range of technical and non-technical stakeholders and work effectively under pressure. You will ideally have: Knowledge and experience across identity and access management processes, including provisioning, de-provisioning, access controls, identity governance and role-based access controls. Strong familiarity with Active Directory, Azure Active Directory and privileged account management processes and tools. An understanding of AWS and Azure cloud platforms and their identity and security capabilities. Technical knowledge of SIEM and security analytics solutions, particularly Splunk and Splunk SOAR (Phantom). Knowledge of technologies such as VPNs, storage services and Windows operating systems. Experience with non-Windows operating systems will be highly regarded. Exposure to security technologies such as Check Point, Zscaler, CrowdStrike or Palo Alto firewalls would be advantageous. Experience working in an ITIL-compliant environment, including an understanding of incident and change management processes. Knowledge of security frameworks and standards such as ISO 27001, NIST and the Essential Eight would be advantageous. The ability to identify opportunities for automation and scripting to improve security operations. Qualifications The following qualifications or certifications would be advantageous: University degree in Cyber Security, Information Technology, Computer Engineering or a related field. Microsoft and/or AWS security certifications. Splunk or SIEM-related training or certifications. ITIL certification. CompTIA Security+ or other recognised cyber security certifications or training. Why Service Stream? At Service Stream, we are committed to creating an inclusive and supportive workplace where our people can grow and make a meaningful contribution. You will join a collaborative ICT team and have the opportunity to build your cyber security career while supporting a business that delivers essential services and infrastructure across Australia. Employer: Service Stream Holdings Pty Ltd Recruitment advertising placed by: Service Stream Holdings Pty Ltd Applications for this position are open from 27 August 2026 and will close on 24 September 2026 . Department GBIS How to Apply If this sounds like you apply now to the Service Stream Recruitment Team via the online application button.