Threat Analyst 2 (Cybersecurity)

Location: Remote within Australia; candidates must reside in and be authorized to work in Australia.

Company

hirify.global provides cybersecurity products and managed detection and response services.

What you will do

• Handle escalations from Level I Threat Analysts and guide investigation handling.
• Provide detection and response for security events and cyber threats across enterprise, endpoint, and log-analysis systems.
• Conduct security log monitoring, maintain information security metrics, and create MDR reports and client cases.
• Track client cases through threat neutralization and communicate with clients through various channels.
• Research indicators of compromise and attack, exploits, vulnerabilities, threat trends, and intelligence.
• Onboard and train analysts, improve Security Operations processes, and support core security and threat response teams.

Requirements

• 2–4 years of experience in a SOC environment or computer security team within an IT environment.
• Required endpoint and network security experience, including IDS, IPS, EDR, ATP, malware defenses, and monitoring.
• Knowledge of adversary tactics and techniques, including obfuscation, persistence, and defense evasion.
• Working knowledge of incident response procedures and strong Windows event log analysis skills.
• Experience administering and supporting Windows workstations and servers, plus Apple or Linux-based operating systems.
• Fundamental understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols.
• Experience with scripting languages such as KQL, PowerShell, or Python.
• Excellent troubleshooting and analytical thinking skills, with strong documentation and communication abilities.
• Bachelor’s degree in Information Technology, Computer Science, or a related field, or relevant commensurate work experience.
• Willingness to work outside standard business hours, including weekends and holidays, for a 24X7X365 Managed Detection and Response service.
• Ability to work effectively both within a team and independently.

Nice to have

• Threat hunting experience.
• Knowledge of the MITRE ATT&CK framework.
• SQL query construction experience.
• OSQuery experience.
• Enterprise information security data management and SIEM experience.
• Advanced cybersecurity certifications.

Culture & Benefits

• Full-time remote work within the location specified in the posting.
• Collaboration across locations and time zones using technology.
• Work supporting a managed detection and response service operating 24X7X365.
• Inclusive workplace committed to equal employment opportunities and reasonable accommodations.