Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services. Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas: Red Team (Security Consulting & Penetration Testing) Blue Team (Security Architecture & Engineering) Security Operations Centre (SOC) We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia. We have a number of focus areas and specialisation within the SOC, these are: Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios A Day In The Life The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises. You will also be proactively supporting our clients and the Principal/Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities. We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role. Requirements Essential 3+ years of experience working with systems, networking and security technologies, with at least 2 years working as a Security Analyst or equivalent role Hands-on security knowledge of Windows/Linux/Unix platforms Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology In-depth knowledge of the MITRE ATT&CK Framework A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack Desirable You are naturally curious and a self-starter. Tell us about how you build Cyber Ranges in your own time, or your latest research project. You have experience with Internal Investigations and/or Insider Threat Management. You have worked with custom applications and log formats in a TDIR context. You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking. You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better! Show us how you automate using PowerShell and Python. You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.