An increased focus on assisting our customers with operational security has created opportunities for security operations analysts to join our team. It is primarily a role working on our managed security service while also developing and supporting our internal tools and infrastructure. There are also opportunities for further career growth in security operations and incident response, or as a gateway into penetration testing or security strategy and architecture consulting, if those are preferred career paths.

To be in the running, we are looking for someone who has:

• A demonstrated passion for security. This might be in the form of side projects, blog posts, original research, or conference talks.  
• A mindset for constant learning and improvement. This is for self learning, sharing knowledge with others and optimising/improving things be they, processes, policies or code.
• Development experience or interest. Specifically with the following:
  - ReactJS (or other JS based web framework).
  - NodeJS (or other JS based engine).
  - Python.
  - AWS.

• An awareness of the threat landscape that Australian and international organisations face
• An interest in working as part of a blue team
• Excellent oral and written communication skills

‍

This person can also currently, or learn the following on the job:  

• Understand, interpret, and respond to events from common enterprise log sources.  
• Monitor incoming alert and event queues for potential security incidents.  
• Quickly and efficiently contextualise events and alerts within the enterprise environment.  
• Conduct security research and intelligence gathering on emerging threats and exploits.
• Perform ad-hoc threat hunting to manually identify potential anomalies in client
  environments.  
• Ensure appropriate documentation is produced to communicate the technical security
  environment and SOC processes and procedures.  
• Implement operational rules and systems to comply with policy, audit, and regulatory
  requirements.  
• Manage and administer core cyber security systems in accordance with policies, regulations,
  and best-practice security methodology.  
• Analyse, evaluate, and improve enterprise network/systems cyber security posture and
  defence in accordance with policies, regulations, and best-practice security methodology.  
• Provide Triage and L1 and L2 Incident Response.
  

The right candidate may also stand out with these extras that are desirable:

• Technical experience in DevOps and CI/CD.
• Security Operations experience - incident detection, triage, and remediation.  
• Experience with an Incident response workflow tool - development and implementation of automation workflows.
• Strong system administration skills, especially in Azure and Office 365.  
• Experience in defining Events of Interest and building detections for them within a SIEM solution, based on client requirements or intelligence feeds.

‍

To apply, email mon@fortian.com.au or give him a call on 0414 198 690

‍

ALL APPLICANTS MUST BE AUSTRALIAN PERMANENT RESIDENTS OR AUSTRALIAN CITIZENS. If you are not an Australian Citizen or Permanent Resident, please DO NOT apply. Candidates must be willing to obtain a security clearance, which may be required for work with some customers.

Fortian is committed to ensuring our culture, policies and processes are truly inclusive and that no-one is disadvantaged on the basis of their Aboriginal and Torres Strait Islander identity, gender, culture, disability, LGBTIQA+ identities, family and caring responsibilities, age, or religion.