Information Security Operations Analyst

About the role

The Information Security Operations Analyst will join Starling Group’s Security Operations Centre (SOC) to support 24/7 cyber‑security capabilities across our global business. Working from Sydney, you will collaborate with colleagues in the UK and Toronto to protect customers, assets and systems using modern security technologies.

Key responsibilities

• Triaging, responding to and investigating security alerts from cloud infrastructure, endpoint detection and response (EDR) and perimeter detection tools.
• Investigating user‑reported security incidents and enhancing analytic triggers to improve alert efficacy.
• Developing and refining incident handling and readiness processes.
• Conducting proactive threat hunting based on current threat intelligence.
• Documenting incidents and investigations for internal knowledge sharing.

Required profile

• Self‑driven individual who takes ownership of tasks and outcomes.
• Ability to work in a fast‑paced, collaborative environment.
• Strong communication skills to share knowledge with international colleagues.

Required skills

• Experience with cloud security monitoring.
• Proficiency in Endpoint Detection and Response (EDR) solutions.
• Familiarity with perimeter detection tooling.
• Ability to perform security alert triage and incident response.
• Knowledge of threat intelligence and threat hunting techniques.
• Skill in creating and tuning analytic triggers.

What we offer

• Hybrid working model with a preference for a commutable location in Sydney.
• Flat organisational structure that empowers decision‑making.
• Supportive, borderless culture with global collaboration.