Cyber Security Analyst

About the role

Our client, a leading hospitality brand, is seeking a Cyber Security Analyst to join a dedicated team of five reporting to the CISO. Based in Maitland, the role will start with 3‑5 days on‑site per week and transition to a hybrid model with two days in the office.

Key responsibilities

• Monitor, triage and investigate security alerts on the SIEM platform, driving incidents to resolution.
• Develop and fine‑tune detection rules, queries and dashboards together with the MSSP to improve signal fidelity.
• Manage the full vulnerability lifecycle – scanning, prioritisation, remediation tracking and reporting.
• Collaborate with infrastructure and MDM teams to ensure timely patching and risk‑based remediation aligned with Essential Eight requirements.
• Support regulatory compliance activities, including evidence gathering, control testing and liaison with assessors.
• Administer Fortinet security infrastructure – firewalls, SD‑WAN policies and FortiClient VPN – maintaining availability and performance.
• Conduct firewall ruleset reviews and clean‑up to keep configurations current and fit‑for‑purpose.

Required profile

• 3+ years of experience in infrastructure or cybersecurity.
• Background in the private sector, preferably health or retail.
• Experience with networking (Fortinet firewalls), infrastructure and Microsoft technology environments.
• Proficiency with XDR and SIEM platforms.
• Strong knowledge of the Microsoft security stack (Entra ID, Privileged Identity Management, Conditional Access, Intune).
• Familiarity with certificate‑based Wi‑Fi authentication, RADIUS and PKI lifecycle management.
• Exposure to NinjaOne, SentinelOne or Rapid7 is highly desirable.
• Ability to quickly adopt new technologies and travel to the Maitland site as needed.

Required skills

• Fortinet firewalls
• SD‑WAN
• FortiClient VPN
• SIEM platforms
• XDR solutions
• Vulnerability scanning tools
• Microsoft Entra ID
• Privileged Identity Management
• Conditional Access
• Intune
• MDM systems
• RADIUS
• PKI certificate lifecycle management
• NinjaOne
• SentinelOne
• Rapid7