Principal Security Analyst

Responsibilities

• Lead investigation and response to complex or high-severity security incidents as a senior escalation point.
• Conduct advanced threat hunting across enterprise, endpoint, identity, network, and cloud environments.
• Develop, tune, and improve detections across SIEM, EDR/XDR, cloud security, and identity platforms.
• Support digital forensic investigations including endpoint, disk, memory, network, and cloud evidence analysis.
• Develop automation and identify practical AI-assisted improvements across SOC workflows to reduce manual effort.
• Improve incident response playbooks, runbooks, and operating procedures.
• Mentor junior and mid-level analysts through coaching, peer review, and knowledge sharing.

Requirements

• Significant hands-on experience in cyber security operations, SOC analysis, or incident response at a senior/L3 level.
• Practical experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel) and EDR/XDR platforms (e.g., CrowdStrike, Microsoft Defender).
• Experience investigating activity across at least one major cloud platform (AWS, Azure, or GCP).
• Strong understanding of networking, common protocols, Windows/Linux operating systems, and Active Directory.
• Experience using scripting or automation languages such as Python, PowerShell, or Bash.
• Familiarity with the MITRE ATT&CK framework and its application in detection engineering.
• Strong written and verbal communication skills for producing technical reports and stakeholder updates.

Preferred Qualifications

• Relevant certifications such as GCIH, GCFA, CISSP, CCSP, or Microsoft SC-200.
• Tertiary qualifications in cyber security, computer science, or a related technical discipline.

Benefits

• Paid parental leave and well-being initiatives.
• Discounted health insurance and various product/service discounts.
• Access to career development through the Capability Fingerprint and AI-driven learning platforms.
• Regular recognition and rewards for high performance.

About the Company

NCS Australia is a technology services provider committed to quality and innovation. We partner with clients and communities to shape better outcomes through purposeful work and a collaborative, diverse culture.