Senior Security Analyst (Cybersecurity)

Location: Australia; remote

Company

AI-driven cybersecurity company building a platform that models customer environments and uses AI agents to detect, investigate, hunt, and respond to threats.

What you will do

• Lead security investigations from initial signal through final verdict, determining impact, blast radius, and severity.
• Analyze attacker activity across identity, cloud, endpoint, and SaaS telemetry, including initial access, lateral movement, persistence, and exfiltration.
• Recommend and execute authorized containment actions, communicating impact and next steps to customers.
• Conduct hypothesis-driven and AI-assisted threat hunts and turn findings into cases and detections.
• Help establish investigative standards, response workflows, reporting, and console improvements as a founding analyst.
• Feed investigation patterns and analyst reasoning into detection engineering and product development.

Requirements

• 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at a senior or Tier 3 level.
• Investigation experience across Okta, Entra ID, AWS, Azure, GCP, EDR, Microsoft 365, and Google Workspace.
• Strong knowledge of attacker tactics, techniques, and procedures, including MITRE ATT&CK.
• Experience with AI-assisted investigation or automation and the judgment to assess its limitations.
• Strong customer-facing and written communication skills, including explaining live security incidents.
• Comfort working defined shifts as analyst coverage expands to 24x7.

Nice to have

• Experience in a multi-tenant MDR or MSSP practice.
• Detection rule writing or tuning with Sigma, YARA-L, SPL, KQL, or similar technologies.
• Incident command, executive briefings, threat hunting, or DFIR experience.
• Daily use of AI or agentic coding tools to build analyst tooling.

Culture & Benefits

• Founding analysts shape service design, standards, workflows, and customer deliverables.
• Work across diverse customer environments and the full spectrum of attacker behavior.
• Focus on active defense and real-world security outcomes.
• Autonomy to drive investigations, shape the platform, and own outcomes.
• Culture emphasizing customer focus, high-quality execution, open communication, mentorship, and learning.