Senior Threat Detection Analyst
Company Description
About SEEK
At SEEK, we serve a noble purpose: to help people live more fulfilling and productive working lives and to help organisations succeed.
By joining us, you’ll be part of a multi-national technology business that is far-reaching with a start-up working culture that focuses on a set of collaborative values and appreciates dynamic cultures. SEEK is a place where potential meets possibility – it’s where your career aspiration and our purpose can make great things happen.
Why join us?
Be part of a multi-national tech company with strong core values to help us solve complex challenges for our customers while building a flexible, exciting career – one that could take you anywhere.
We’re looking for people who thrive in dynamic teams and enjoy tackling regular new challenges in a large-scale, modern, and agile environment. As one of Asia Pacific’s largest tech companies, you’ll contribute to multi-lingual systems, solving high-impact problems to the benefit of millions of people within the region.
Be part of a fast-growing company with a strong culture and clear purpose, innovation and strong investment in responsible AI. SEEK offers you the opportunity to be involved in impactful work and be part of a great team. Expect a great investment in your career development with access to workshops, conferences and courses while you work alongside seasoned experts.
Job Description
About the role
You will join a versatile, highly collaborative, and multi-disciplinary team with a wide variety of security skills and responsibilities, working to address security threats across the company. Your primary responsibilities will be cyber threat intelligence and insider risk management, with the opportunity to work on a range of other activities aligned to your interests, including threat hunting, detection engineering, purple teaming, and other strategic priorities.
While the team has separate security sub-teams, there is a strong focus on cross-functional security expertise development, allowing team members to grow proficiency across a wide range of security concentrations. The team is positioned well within the company to execute quickly on things that matter, with team members empowered to identify security control gaps or risks and work toward effective mitigation.
With executive support, you will have the ability to influence the security posture of our infrastructure and products, helping progress SEEK's purpose of helping people live more fulfilling and productive working lives and helping organisations succeed.
This role is based in Melbourne and is also available to candidates based in Sydney or Brisbane.
Responsibilities
- Lead detailed investigations and research into internal and external security threats, performing threat assessments and providing timely briefs to leadership on cyber threat trends, TTPs, and emerging threats.
- Triage and investigate insider risk scenarios and communicate findings to senior leadership.
- Identify, collect, and analyse threat intelligence from OSINT, proprietary sources, and industry groups, including verifying sources and conducting research with strict operational security.
- Maintain and update intelligence collection requirements (ICRs) based on stakeholder needs.
- Monitor, triage, and escalate security alerts, fine-tuning detections for accuracy, and collaborate with incident response and security operations teams during incidents.
- Support threat hunting activities and provide recommendations to uplift controls.
- Advise on geopolitical matters and international travel security risks.
- Support forensic imaging to aid investigations.
- Develop and report on CTI metrics and identify automation opportunities to enhance SEEK's proactive intelligence and threat detection capabilities, including tools, processes, and procedures.
- Establish relationships with industry peers for information sharing and promote a security culture across the organisation, assisting with other security activities as required.
- Mentor security peers, ensuring team growth and effectiveness.
Qualifications
We encourage you to apply even if you don't meet every requirement, your unique experience and potential may still make you a great fit for the role.
Essential Skills and experience
- Minimum 5+ years of experience in cyber security, intelligence, or national security, with a Bachelor's degree in computer science, software engineering, information technology, national security, intelligence, or a related field.
- Excellent problem-solving, analytic, and investigative skills relating to threat detection, insider threat, and security intelligence investigations, with the ability to perform hands-on technical analysis and log review across technologies including endpoint detection, email filtering, SIEM, and more.
- Extensive knowledge of MITRE ATT&CK, advanced persistent threats, and their tactics, techniques, and procedures (TTPs).
- Experience executing incident response activities in a methodical and meticulous manner, with a fundamental understanding of threat detection and threat hunting principles.
- Strong understanding of the geopolitical landscape and associated security risks, with the ability to advise on international travel security.
- Comfortable with at least one scripting and/or programming language.
- Demonstrated leadership abilities, including the ability to mentor peers and clearly articulate difficult technical concepts to senior executives.
- Strong stakeholder engagement skills, including clear verbal and written communication, and proven expertise in developing cyber security strategies, policies, and processes.
- A curious mindset with a passion for solving problems and continuous learning, capable of working both independently and collaboratively.
Other Qualification Skills and Experience
- Incident response, forensic capabilities, and malware reverse engineering are highly favourable but not mandatory.
- Relevant professional qualifications, for example SANS qualifications such as GCTI, GCFA, GNFA, GCTD, or GEIR.
- Experience working in a DevOps environment.
- Experience with automation and AI tools to enhance security operations and intelligence capabilities.
- Passion for continued professional development and demonstrated experience participating in the security community through events, conferences, and knowledge sharing.
Additional Information
Perks and benefits
At SEEK we offer:
- Tailored career development planning
- Support of flexible working, including a mix of office and work from home days depending on your role
- Annual Performance Bonus Plan
- Frequent events including sports days, year-end party, hackathon, and trivia
- Casual dress every day
At SEEK, we are passionate about fostering a culture of inclusion and wellbeing that embraces and values the diversity of our people. We are a purpose driven business that works with heart.
We know teams with diverse ideas, experiences and perspectives are more creative and are critical to ensuring effective delivery and innovating to enable our future success. As such, we welcome applications from people with diverse backgrounds and life experiences, especially as they relate to gender, sexual identity, culture, faith, disability and life stages. If you have the skills, curiosity and an adaptable mindset but don't meet every responsibility or qualification listed in this advertisement, please still get in touch with us. Should you require any specific support or adjustments throughout the recruitment process and beyond, please advise us and we will be happy to assist.
For this role, only those with eligible right to work will be considered.
SEEK kindly requests no unsolicited resumes or approaches from recruitment agencies and will not be responsible for any associated fees.