Security Operations Analyst

About Megaport We’re not your typical tech company – and we don’t want to be. Megaport is the global leader in Network as a Service (NaaS), and has transformed the way businesses connect to the cloud, data centers, and each other. We’re publicly listed on the Australian Stock Exchange and partnered with the biggest names in tech like Amazon, Microsoft, Google, Oracle, IBM, and more. Headquartered in Brisbane with a crew of over 600 people spread across Asia-Pacific, Europe, and the Americas, our employees enjoy an environment that is collaborative, supportive, and (actually) fun.   Our Team Culture We’re a team of problem solvers, pixel pushers, code slingers, and cloud fanatics. Culture is more than a poster on the wall here – collaboration beats hierarchy, curiosity fuels our growth, and everyone’s voice matters. We take our work seriously, but not ourselves. We work across time zones to execute on our global vision, trust each other to get things done, and never compromise our values for commercial gain. Most importantly, we place our customers at the center of everything we do.   We’re committed to increasing representation in the tech industry and welcome applicants from all backgrounds. Don’t meet every requirement? That’s okay. If you’re excited about this role, we encourage you to apply.
The Role

We’re looking for a  Security Operations Analyst to support and strengthen security across Megaport’s. In this role, you’ll help monitor our security systems, investigate alerts, and respond to potential threats across our environment. 

You’ll work closely with our security, infrastructure, and engineering teams to identify and analyze security situations, support incident responses, and help improve the tools we use daily. You’ll also be responsible for providing day-to-day security support across the business and helping ensure security best practices are kept. 

This role is perfect for someone who enjoys problem-solving, is comfortable working in a fast-moving and global environment, and is passionate about cybersecurity.

What You’ll Be Doing

• Administer and operate security information and event management (SIEM) technologies and associated processes as a BAU function including the cultivation of cyber threat intelligence, threat models, and use-case and the implementation and refinement of detection rules.
• Onboarding of additional data sources to the SIEM, correlating data across diverse technologies and environments.
• Manage the response process and conduct end-to-end incident investigation. including analysis of attack artifacts to establish incident scope, impact assessment and containment strategies.
• Manage the technical vulnerability management process including monitoring of disclosure sources, evaluation of penetration test report, the use of vulnerability scanning solutions, and engaging IT system owners to assist with evaluation and remediation.
• Manage and support security solutions such as EDR, ZTNA and DLP.
• Go beyond finding security issues and work to provide solutions.
• Provide technical expertise regarding architecture and implementation design of new solutions.
• Provide general security support in the continued uplift and improvement of the environment.

What We Are Looking For - Some of the following

• Proficient English required, as this role involves regular written and verbal communication with global teams and stakeholders.
• Expertise in SIEM solutions within diverse physical and cloud environments.
• Working, up-to-date knowledge of potential exploits, attacker tools, techniques, procedures, and managing threat intelligence sources.
• Experience with native cloud security tools.
• Experience with vulnerability scanning solutions and best practices.
• Experience working with cloud network and application environments.
• Exposure to incident response processes, procedures, methods, and tools.
• Understanding of desktop and server operating systems.
• Experience with network security (e.g., firewall, IDS/IPS, routing, encryption).Experience with host-level security and hardening.
• Understanding of SDLC security practices.
• Current or past certifications (e.g., CC, Security+, relevant vendor certs).
• A keen interest in security and ongoing learning.

What We Offer

• Flexible working environments
• Birthday Leave
• 12 weeks parental leave (after 12 months continuous service), and 5 days of study leave.
• Creative, fun, and contemporary work environments
• Motivated team of industry experts and plenty of learning opportunities
• Celebrated success with internal awards programs
• Health and wellness program
• Generous performance bonus structure If you have any questions, please reach out to Megaport's Talent Acquisition Team at Careers@megaport.com   NOTE: All Megaport business correspondence is conducted via our business email accounts (@megaport.com). If you have any concerns, please reach out to Megaport's careers team careers@megaport.com directly and we will verify the legitimacy of any communication. Megaport will not ask you to create an account via Microsoft teams, and does not associate with any email accounts under "@megaportau.com".   All applications will be treated in confidence. Please see Part 2 of our Privacy Policy to see what information Megaport collects from job applicants, why, and how we store and use it. Note that you’re entitled to know what personal data of yours Megaport holds, to request updates, rectification, and in some circumstances restriction or deletion thereof if you object (you being entitled to withdraw your consent to our holding your information at any time). Please see Part 5 of our Privacy Policy for more details on this and how to contact Megaport's data protection officer if you have any further privacy-related questions. Candidates who meet the selection criteria will be invited to attend an interview. Strictly no Recruitment Agencies.