Cyber Defence Analyst

About the role

Medibank Group is looking for a Cyber Defence Analyst to join its Cyber Defence Team and support the day-to-day identification, investigation and response to security threats. The role covers security alert analysis, incident investigation and threat hunting, using knowledge of attacker behaviour and the MITRE ATT&CK framework. It works alongside senior analysts and specialists to strengthen the cyber defence function.

Key responsibilities

• Monitor, triage and investigate security alerts across endpoint, identity, network and cloud telemetry.
• Perform initial incident analysis to understand scope, severity and potential impact.
• Escalate complex or high-risk activity to senior analysts or incident responders with clear supporting evidence.
• Apply knowledge of attacker tactics, techniques and procedures when analysing alerts and incidents.
• Use the MITRE ATT&CK framework to categorise activity and support investigations.
• Support the maintenance, improvement and tuning of existing detections.
• Take part in threat hunting and supporting control uplift activities.
• Maintain clear investigation notes, timelines and findings.
• Collaborate with incident response, IT and security engineering teams as required.

Required profile

• Minimum of 4 years' experience in security operations, cyber defence or a related role.
• Experience with detection-as-code, threat hunting or a 24x7 SOC or enterprise security operations environment.
• Strong experience in security alert triage and incident investigations.
• Strong analytical skills and attention to detail, able to work independently while following established processes.
• Entry or intermediate security certifications such as Security+, BTL L1/L2 or GCIH are desirable.

Required skills

• One or more of Microsoft Security Suite, Splunk, Falcon NG, CrowdStrike Falcon Suite, email, endpoint, identity, network or cloud telemetry.
• Working knowledge of common attack methodologies and adversary behaviour.
• Familiarity with the MITRE ATT&CK framework.
• Experience with one or more SIEM or EDR platforms.