Security Operations Analyst

Job description

**About Megaport** We’re not your typical tech company – and we don’t want to be. Megaport is the global leader in Network as a Service (NaaS), and has transformed the way businesses connect to the cloud, data centers, and each other. We’re publicly listed on the Australian Stock Exchange and partnered with the biggest names in tech like Amazon, Microsoft, Google, Oracle, IBM, and more. Headquartered in Brisbane with a crew of over 600 people spread across Asia-Pacific, Europe, and the Americas, our employees enjoy an environment that is collaborative, supportive, and (actually) fun. **Our Team Culture** We’re a team of problem solvers, pixel pushers, code slingers, and cloud fanatics. Culture is more than a poster on the wall here – collaboration beats hierarchy, curiosity fuels our growth, and everyone’s voice matters. We take our work seriously, but not ourselves. We work across time zones to execute on our global vision, trust each other to get things done, and never compromise our values for commercial gain. Most importantly, we place our customers at the center of everything we do. We’re committed to increasing representation in the tech industry and welcome applicants from all backgrounds. Don’t meet every requirement? That’s okay. If you’re excited about this role, we encourage you to apply. **The Role** We’re looking for a Security Operations Analyst to support and strengthen security across Megaport’s. In this role, you’ll help monitor our security systems, investigate alerts, and respond to potential threats across our environment. You’ll work closely with our security, infrastructure, and engineering teams to identify and analyze security situations, support incident responses, and help improve the tools we use daily. You’ll also be responsible for providing day-to-day security support across the business and helping ensure security best practices are kept. This role is perfect for someone who enjoys problem-solving, is comfortable working in a fast-moving and global environment, and is passionate about cybersecurity. ### What You’ll Be Doing - Administer and operate security information and event management (SIEM) technologies and associated processes as a BAU function including the cultivation of cyber threat intelligence, threat models, and use-case and the implementation and refinement of detection rules. - Onboarding of additional data sources to the SIEM, correlating data across diverse technologies and environments. - Manage the response process and conduct end-to-end incident investigation. including analysis of attack artifacts to establish incident scope, impact assessment and containment strategies. - Manage the technical vulnerability management process including monitoring of disclosure sources, evaluation of penetration test report, the use of vulnerability scanning solutions, and engaging IT system owners to assist with evaluation and remediation. - Manage and support security solutions such as EDR, ZTNA and DLP. - Go beyond finding security issues and work to provide solutions. - Provide technical expertise regarding architecture and implementation design of new solutions. - Provide general security support in the continued uplift and improvement of the environment. ### What We Are Looking For - Some of the following - Proficient English required, as this role involves regular written and verbal communication with global teams and stakeholders. - Expertise in SIEM solutions within diverse physical and cloud environments. - Working, up-to-date knowledge of potential exploits, attacker tools, techniques, procedures, and managing threat intelligence sources. - Experience with native cloud security tools. - Experience with vulnerability scanning solutions and best practices. - Experience working with cloud network and application environments. - Exposure to incident response processes, procedures, methods, and tools. - Understanding of desktop and server operating systems. - Experience with network security (e.g., firewall, IDS/IPS, routing, encryption).Experience with host-level security and hardening. - Understanding of SDLC security practices. - Current or past certifications (e.g., CC, Security+, relevant vendor certs). - A keen interest in security and ongoing learning. ### What We Offer - Flexible working environments - Birthday Leave - 12 weeks parental leave (after 12 months continuous service), and 5 days of study leave. - Creative, fun, and contemporary work environments - Motivated team of industry experts and plenty of learning opportunities - Celebrated success with internal awards programs - Health and wellness program - Generous performance bonus structure