Security Operations Specialist

About the role

Monadelphous is seeking a Security Operations Specialist for its Cybersecurity team in Perth, reporting to the Cybersecurity Manager. You will play a key defensive role, monitoring, analysing and responding to security events across the organisation, working with internal stakeholders and managed security service providers. The role suits someone with SOC, incident response or other defensive cybersecurity experience.

Key responsibilities

• Monitor, investigate and respond to cybersecurity incidents, alerts and security events.
• Analyse threats, triage, contain and remediate identified security risks.
• Manage and coordinate security incidents through ServiceNow, ensuring timely investigation and resolution.
• Partner with a managed SOC to investigate and respond to security events.
• Conduct endpoint- and identity-based investigations using security monitoring, detection and response tools.
• Support vulnerability management and coordinate remediation with internal stakeholders.
• Analyse threat intelligence and recommend actions against emerging threats.
• Manage email security, including phishing investigations, quarantine reviews and policy administration.
• Support identity and access management, including privileged access reviews, password hygiene and multifactor authentication controls.
• Identify trends and opportunities to improve security processes and controls, and communicate clearly with technical and non-technical stakeholders.

Required profile

• Previous experience in a SOC, cybersecurity operations, incident response or similar information security role.
• Experience investigating and responding to security incidents and cyber threats.
• Desirable: knowledge of the MITRE ATT&CK framework, CISSP or another cybersecurity certification, a degree in Cybersecurity, Information Security, Information Technology or a related discipline, experience with managed security service providers and in large enterprise environments.

Required skills

• Knowledge of SIEM platforms, identity and endpoint detection and response technologies, and security monitoring practices.
• Experience with CrowdStrike or similar identity and endpoint security platforms.
• Experience managing security controls in Microsoft 365 and Azure environments.
• Experience with ITIL-aligned service management using ServiceNow or similar ticketing systems.
• Knowledge of cyber threat indicators, attack techniques, defensive countermeasures, email security, data loss prevention and identity security principles.

What we offer

• Growth and career development opportunities.
• A lively, supportive and collaborative team environment.
• Work-life balance and flexibility.