At Leidos Australia, we operate a 24x7x365 Central Processing Cyber Security Operations Centre (CP SOC) capability, with the Department of Defence. CP SOC works collaboratively with the Defence Security Operations Centre (DSOC) to assist in defending one of the largest and most complex ICT networks in the southern hemisphere.We are seeking a Junior Cyber Security Analyst to join CP SOC.If you want to break into Cyber Security, or seeking to move into a new role, while being part of a high performance team, which is committed to your professional growth, with a mission focused on defending critical national infrastructure, then this is the job for you. This is a permanent role that requires the successful applicant to working on a rotating shift roster (typically 12 hour shifts) onsite at HMAS Harman in Canberra.This role offers you the opportunity to:Develop your technical and cyber security skill setsBuild and shape security tooling to defend critical national security infrastructureChallenge yourself by sinking your teeth into some wicked problem setsHelp build the team culture that you have always wanted to work inTo be successful in this role you will need:Self-starting individual with the right attitude, aptitude and zeal to identify, take ownership of and solve challenging problemsInterest in continual learning and development of themselvesBe prepared to rapidly upskill yourself to respond to adversariesStrong communication and stakeholder management skillsAn awareness of applicable industry and government cyber security frameworksAs a Junior Security Analyst working within a 24/7 Security Operations team you will monitor networks and endpoints for security events, alerts, active threats, intrusions and compromises and perform triage.  Depending on the issue you may manage the event end to end, consult with your peers or escalate as appropriate. This is a great opportunity to build upon your existing technical knowledge and skills and grow your career in a dedicated cyber security role.  Your responsibilities will include;Analysis of security events from multiple sources including but not limited to events from the Security Information and Event Management tool, network intrusion systems and Host based Intrusion Prevention tools (AV, HIPS, Application Whitelisting);Monitor and assess emerging threats and vulnerabilities to the environment and ensure those requiring action are addressed;Security Incident Management, advice and education and maintaining the currency and health of the deployed security tools;Provide technical administration support for security suite of software and hardware;Produce contractual and stakeholder reports and review, document and improve processes to contribute to the overall security of the environment.
