Security Operations Specialist

• Permanent Role
• $140-$150,000 + Super
• Sydney CBD Location - Hybrid Working

Intrinzic are proud to be partnering with one of the most important organisations in Australia in the search for a Security Operations Specialist.

This organisation is a leader in the domestic payments infrastructure that this country sits on - the rails underneath the card payments, the bill payments and the real-time transfers that move money between Australians every day.

This is a new role, created as part of the organisation’s response to frontier AI and the new wave of threats that come with it. The security operations team is small and close to the top: a Senior Manager, a junior analyst, and now you, with a direct line to the CISO. A managed security partner watches the environment 24/7. When something needs a closer look, it comes to you. You’ll investigate it, respond, find the root cause and make sure it’s less likely to happen again. It’s a hands-on role with no direct reports, for someone with four or more years in security operations who wants their work to be seen.

What you will do

• Investigate alerts and escalations from the managed security partner: what happened, how far it went and what was affected
• Respond to security incidents from containment through to recovery, then write the incident report and run the lessons learned
• Hunt for threats that haven’t triggered an alert
• Recommend changes to detection rules so real threats are caught sooner and noise drops
• Review the partner’s threat-hunting reports and suggest how to make them more useful
• Assess vulnerabilities, agree fixes with infrastructure and technology teams, and chase remediation to SLA, escalating when it stalls
• Work with Security Engineering on test cases built around the threats the organisation actually faces
• Write and maintain playbooks, runbooks and procedures, and look for work that can be automated
• Be the escalation point for the junior analyst and give risk-based advice on changes and new technology
• Prepare security metrics and risk summaries for leadership

What you will need

• Four or more years in security operations, incident response or a similar hands-on role
• Real incidents and investigations behind you, and the judgement to know when to escalate and when to close
• Experience with EDR, SIEM and cloud security tools
• The ability to explain what you found clearly to technical and non-technical people
• Comfort working on your own and picking up new tools quickly
• A habit of fixing the cause, not just closing the ticket

What will put you in front

• CrowdStrike Falcon and/or Wiz
• AWS security experience
• A background in financial services, payments or other critical infrastructure
• Threat hunting or threat intelligence experience
• Certifications such as GCIH, GCFA, BTL1 or similar, though practical experience counts just as much

If you want your work to protect something the whole country relies on, this one is worth a conversation.

To submit your profile for consideration or for further information, please click APPLY or email aaron@intrinzic.com.au

Please note: Candidates must be Australian permanent residents or citizens to apply for this opportunity.