Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defence technologies. As a SecOps analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalisation operations across the organization to understand user behavior and identify anomalies.

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimise tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organise and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders
• Proactively collaborate with a wide range of stakeholders

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Eligible to obtain and maintain an Australian NV2 clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!

Although we list out what we generally look for, we are very likely missing other attributes and skills that you have that could make you a great fit, but are not currently listed. Research has shown this especially applies to women and other marginalised groups, who tend to apply if they check 100% of every box, versus men who apply if they hit roughly 60%. The point we’re getting at, it doesn’t hurt to take a chance and apply!

Security Analyst 

• Hands-on experience with security monitoring, incident response and tools such as EDR, XDR and SIEM
• Protect millions of customers and help shape Zip’s cyber defence capability in a fast-moving, high-impact environment
• Hybrid working with team connection in our Sydney office

Write your story with a career at Zip

Join Zip’s Technology function, responsible for building and maintaining seamless, secure and sustainable platforms that enable customers to shop with confidence and merchant partners to grow their brands.

As a Security Analyst within our Cyber Security team, you’ll play a key role in protecting our platforms, systems and customers from cyber threats. Sitting within our Security Operations capability, you’ll work at the intersection of monitoring, investigation and response, partnering closely with Engineering, Platform and IT teams to detect and resolve threats quickly while continuously improving our security posture.

What you’ll own

• Monitoring and triaging security alerts across endpoint, cloud and detection platforms
• Investigating suspicious activity and validating potential incidents across environments
• Coordinating incident response with cross-functional teams to minimise impact and reduce dwell time
• Improving detection capabilities through tuning and optimisation of alerts
• Producing clear incident reports, metrics and insights to strengthen operational visibility
• Building strong relationships with Engineering, Platform and IT teams to enable effective collaboration

What you'll bring to the team

Zipsters work on a broad range of initiatives, and our skills and experiences all look a little different. What really matters to us is that you’re a great fit with our four Values, and have a desire to learn and grow.

So whether you meet some or all of the desirable attributes below, we’d still love to hear from you:

• 2+ years experience in cyber security, SOC operations, IT operations or a related technical role
• Hands-on experience with security monitoring tools such as CrowdStrike or other EDR/XDR platforms
• Familiarity with SIEM platforms and alert triage workflows
• Working knowledge of attacker behaviours and frameworks such as MITRE ATT&CK
• Strong analytical and investigative skills with the ability to distinguish signal from noise
• Clear communication skills and the ability to document incidents and insights effectively
• A mindset that embraces AI and new tools to adapt, learn and grow.
• An aptitude for identifying and managing risks. Whether you are a People Manager or an Individual Contributor, we are all leaders at Zip, therefore effective risk management is important to how we run our business and part of all our roles.
• Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game

What you’ll get in return

As we write this next exciting chapter in our story, we will continue to move at pace and embrace change. For you, this might mean opportunities to learn new skills with hands-on experience, broader responsibilities, or the buzz of seeing your work impact customers faster.  

Zip is a place where you’ll get out exactly what you put in. When you join the team, we'll do our best to make sure you can be yourself and surround yourself with smart, friendly colleagues and leaders who have your back, so that you can make the big things happen.

Zipsters tell us these are just some of the best things about working here. You’ll also receive:

• 25 days paid leave annually, including birthday leave and quarterly wellbeing days
• 16 weeks paid parental leave for primary carers, and 4 weeks for supporting carers
• Family support policies including miscarriage bereavement leave and domestic violence leave
• Mental health and wellness initiatives, including $299 annual wellbeing allowance, free access for you and family members to our EAP service Sonder, discounted private health insurance, and great rates on fitness sessions through ClassPass
• 2 days paid volunteering leave per year
• Access to the Flare Benefits Hub and Novated Leasing for savings across lifestyle, essentials and wellbeing
• Fee-free Zip products, and discounts with Zip merchant partners
• Team social events, epic offices, free breakfast daily, and weekly free lunches

Be a part of a team that reflects the diversity of our customers

We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.

Equally, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.

And finally…get to know us

Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products that bring customers and merchants together.

Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.

We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.

#LI-Hybrid