Security Operations Analyst

Role overview Investigate security alerts and active intrusions, determine how attacks unfolded, and help customers contain threats and recover. The work spans alert triage, forensic analysis, malware investigation, and improvements to detection and response operations. This is a remote role for someone in Australia, working Monday through Friday from 8:00 a.m. to 4:00 p.m. Perth time.

Responsibilities - Triage and investigate alerts, respond to incidents, and guide remediation. - Analyze endpoint and SIEM telemetry, logs, and forensic artifacts to identify attack scope and likely causes. - Examine suspicious files dynamically when needed and identify indicators of compromise or malicious behavior. - Improve detection signals and alert queue quality as threats evolve. - Investigate compromised Microsoft 365 and Google Workspace environments and recommend concrete remediation. - Help resolve customer and partner escalations, and work with product and engineering teams to improve security workflows.

Requirements - At least two years of experience in a SOC, incident response, managed detection and response, or digital forensics role. - Practical experience with Windows, Linux, or macOS, including attack surfaces, malware analysis, and common threat techniques. - Knowledge of system administration concepts such as Active Directory, PowerShell, Group Policy, and local accounts. - Familiarity with MITRE ATT&CK techniques, including credential theft, lateral movement, persistence, and data exfiltration. - Working knowledge of networking fundamentals, including common ports and protocols, NAT, IP addressing, and VLANs. - Clear written and verbal communication, sound investigative judgment, and a habit of validating AI-assisted analysis before acting on it.

Benefits and work setup - Fully remote within Australia, with hours aligned to Perth time. - Base pay of $110,000–$140,000 AUD, plus bonus and equity. - Home office setup reimbursement, monthly phone and internet allowance, and a home office technology stipend. - Paid parental leave, subsidized private health insurance, stock options for full-time employees, and access to coaching and professional development. - Annual travel to a U.S. team event, with additional local events in Australia.