Cyber Defense Analyst at Deloitte Services Pty Ltd | AU | Rezi

Cyber Defense Analyst at Deloitte Services Pty Ltd

Cyber Defense Analyst

Deloitte Services Pty Ltd · AU

2 weeks ago

Cyber Defense Analyst

Deloitte Services Pty Ltd · AU

16 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Cyber Defense Analyst role.

Rezi rewrites your resume against Deloitte Services Pty Ltd's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Cyber Defense Analyst posting at Deloitte Services Pty Ltd — free, in seconds.

About the Role

Join Deloitte Australia's Cyber Defence team in a senior technical role where you'll help strengthen our incident response, detection capability and AI-augmented cyber operations. This role is hands-on and technical, with a strong focus on leading security incident investigations. You'll conduct technical analysis, help scope incidents, support containment decisions, and provide clear status updates to leadership. You will also contribute to post-incident reviews, documenting root cause and remediation actions. A key part of the role is improving how incident response and SIEM capability work together, translating investigation findings into new or improved detection content, advising on detections, playbooks and log coverage, and helping reduce manual effort while improving response speed. You'll also work across SOAR automation and continuous improvement activities that lift the team's overall effectiveness. Alongside the technical work, you'll engage day to day with Deloitte SIEM and global service partners, contributing to the AU Cyber Defence Strategy and AI Cyber Strategy. The role also involves applying and trialling AI and automation across triage, detection engineering and investigation support, while keeping runbooks, playbooks and operating procedures current and tested. You'll share your experience through informal coaching that helps less experienced team members grow.

Responsibilities

  • Lead cyber incident investigations
  • Conduct technical analysis
  • Help scope incidents
  • Support containment decisions
  • Provide clear status updates to leadership
  • Contribute to post-incident reviews, documenting root cause and remediation actions
  • Improve incident response and SIEM capability integration
  • Translate investigation findings into new or improved detection content
  • Advise on detections, playbooks and log coverage
  • Reduce manual effort while improving response speed
  • Work across SOAR automation and continuous improvement activities
  • Engage with Deloitte SIEM and global service partners
  • Contribute to the AU Cyber Defence Strategy and AI Cyber Strategy
  • Apply and trial AI and automation across triage, detection engineering and investigation support
  • Keep runbooks, playbooks and operating procedures current and tested
  • Share experience through informal coaching

Requirements

  • Demonstrated experience investigating security incidents, including technical analysis and containment actions
  • Strong technical background in SIEM platforms such as Microsoft Sentinel, Splunk or equivalent, including detection engineering and SOAR automation
  • Experience working with managed security service providers or global SOC and service delivery models
  • Strong written and verbal communication skills, with the ability to produce clear technical summaries for leadership use
  • Familiarity with the MITRE ATT&CK framework and detection engineering methodologies
  • Exposure to AI/ML-enabled security tooling, or experience applying automation and AI to security operations workflows
  • Understanding of AI and Frontier AI risk concepts
  • Certifications such as GCIH, GCFA, vendor-specific SIEM certifications, MITRE ATT&CK-based training, or AI security fundamentals

Skills

  • Incident Response
  • Detection Engineering
  • SIEM Integration
  • AI-Assisted Operations
  • Technical Analysis
  • SOAR Automation
  • Cyber Defence Strategy
  • AI Cyber Strategy
  • MITRE ATT&CK framework
  • Detection Engineering Methodologies
  • AI/ML-enabled security tooling
  • Automation
  • AI
  • Security Operations Workflows
  • AI Risk Concepts
  • Frontier AI Risk Concepts

Location

  • Australia

Work Type

  • Hybrid

Experience Level

  • Senior

Education Level

  • Certifications such as GCIH, GCFA, vendor-specific SIEM certifications, MITRE ATT&CK-based training, or AI security fundamentals

Benefits

  • Retail discounts
  • Wellbeing leave
  • Paid volunteering days
  • Twelve flexible working options
  • Market-leading parental leave and return to work support package

About the Company

  • Cyber Defence helps protect Deloitte Australia by strengthening how we detect, investigate and respond to cyber threats.
  • The team works across incident response, SIEM engineering, detection improvement and operational readiness, partnering closely with internal stakeholders plus Deloitte SIEM and global service partners.
  • It's a space where technical depth, practical problem solving and emerging approaches like AI-assisted operations all come together in work that directly supports the firm's resilience.
  • At Deloitte, we focus our energy on interesting and impactful work.
  • We're always learning, innovating and setting the standard; making a positive difference to our clients and our society.
  • We put coaching at the heart of what we do, helping our people grow their careers in any direction - whether it be up, moving into something new, or even moving across the world.
  • We embrace diversity, equity and inclusion.
  • We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles.
  • What binds us together is a shared commitment to value everyone's perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong.
  • We value in-person connection with our clients and our colleagues.
  • We offer several ways for you to work flexibly so that you can serve your clients, stay connected with your team, and manage your personal priorities.
  • We help you live and work well.

Equal Opportunity

  • We embrace diversity, equity and inclusion.
  • We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles.
  • What binds us together is a shared commitment to value everyone's perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong.