Cyber Incident Response Analyst

Job Description

Career Opportunities: Cyber Incident Response Analyst (11972) Requisition ID 11972 - Posted - AEMO Office (6) - Graduate Analyst - Cyber Incident Response Department: People & Culture Division: Workplace Relations & Planning Reference number: 11972 AEMO at the Heart of Energy AEMO is Australia’s independent energy system and market operator and system planner. AEMO’s purpose is to ensure safe, reliable and affordable energy today, and enable the energy transition for the benefit of all Australians. Australian governments are now committed to a net zero economy for Australia by 2050 and our vision is to enable this. We have the once-in-a-lifetime opportunity to co-design the future of our energy systems, and our core values revolve around character, commitment, and connection. Join us as we contribute to this significant transition in the energy sector. Position Purpose In light of growing sophistication of cyber threats and the continued focus AEMO are receiving from various threat groups, it is imperative that we prioritise and maintain a mature Cyber Incident Response team within AEMO. The purpose of this position is to provide specialised skills and expertise in threat detection, analysis, and digital forensics to respond to the ever-growing cyber threats AEMO people and technology face each day. This is a permanent full-time position that can be based anywhere in Australia What you will be doing Conduct cyber defence and response activities including triaging alerts, investigating security incidents and providing response and containment against active threats Proactively search for signs of malicious activity within AEMO IT infrastructure Detection improvements to cater for the ever-changing technology stack and cyber security threat landscape Conduct digital forensic investigations to gather evidence and identify root cause of security incidents Contribute to the improvement of protective security controls Continual improvement / development of documentation, processes, playbooks and incident response Work closely with cross-functional teams, including other Digital teams to coordinate incident response efforts and process improvements Participate in on-call rotation responding to cyber threats outside business hours What you will bring to the role Tertiary qualifications in computer science or technology-related field, or equivalent work or education related experience Minimum of one to two years' experience in cyber security operations and/or cyber security incident response Minimum of one to two years' energy market operation experience Demonstrated experience in cyber incident investigation, response, threat containment and eradication Demonstrated experience in digital forensic collection, investigation, timelining and organisation wide threat hunting Strong analytical, investigation and problem-solving skills Experience with Cyber Security Kill Chain and the MITRE ATT&CK Framework In return some of our benefits to you Flexible working: work from home, hybrid options, and additional leave options Professional development via projects, industry networks, job rotation, study assistance and more Give back with up to 4 days of volunteering leave per year Reward your hard work with annual performance bonuses (subject to eligibility) Embrace a healthier you with our wellness program, discounted health insurance, gym perks and our comprehensive Employee Assistance Program (EAP) About Our Process AEMO values diversity and inclusivity in the workplace, welcoming applications from all backgrounds without regard to age, disability, gender, sexual orientation, parental status, race, religion and our First Nation peoples. We are dedicated to accommodating applicants' needs during the application or interview process, simply let us know by emailing us at If you would like to know more about working at AEMO, please check out our careers page for more information. For more information on the Australian Energy Market Operator (AEMO) please refer to or visit one of our social media channels below. #J-18808-Ljbffr