Cyber Security Senior Analyst

About the role

Reporting to the Cyber Security Manager, you will lead investigation and response to cyber security incidents across IT and OT environments at Metro Trains Sydney. You will coordinate assurance activities, vulnerability remediation, security monitoring and resilience exercises while partnering with technical, operational and business stakeholders.

Key responsibilities

• Lead technical investigation, triage, containment, eradication and recovery of cyber incidents affecting IT and OT.
• Strengthen security monitoring and detection in partnership with SOC, MDR and cyber operations providers.
• Plan and facilitate tabletop, desktop and incident simulation exercises.
• Coordinate penetration testing, vulnerability assessments and risk‑based remediation programmes.
• Support implementation and validation of cyber security technologies across IT and OT.
• Develop playbooks, procedures, metrics, dashboards and management reporting.

Required profile

• Relevant tertiary qualification in Cyber Security or equivalent experience.
• 4‑6 years’ experience in cyber security operations or resilience, preferably in critical infrastructure or transport.
• Proven experience coordinating incident response, evidence preservation and post‑incident reviews.
• Strong written and verbal communication skills, including executive reporting.
• Knowledge of OT/Industrial Control Systems is highly regarded.

Required skills

• SIEM, EDR/XDR, vulnerability management, penetration testing, firewalls, network segmentation.
• Cloud security, Microsoft Azure, Microsoft 365, hybrid cloud environments.
• Experience with SOC, MSSP, MDR, DFIR providers.
• Familiarity with Splunk and OT/ICS risk.

What we offer

• Permanent role with flexible working options.
• Fitness Passport discounts and gym access across NSW.
• Maxxia vehicle leasing options.
• Employee Recognition Awards.
• EAP services including confidential advice.