Security Analyst

Role overview

Hume City Council is among Australia’s fastest expanding and most culturally varied local councils. The organisation places community needs and customer service at the heart of its work, with a strong focus on delivering services that are efficient and easy to access.

This permanent full-time Security Analyst position sits within the Cyber team and reports to the Security Operations Lead. The role is responsible for helping protect the Council’s information systems and data by monitoring for cyber threats, investigating suspicious activity, and supporting compliance with applicable legislation and security requirements.

The package includes an annual salary of $83,714.28 plus superannuation.

Key duties

• Keep watch over security tools, networks, and applications to spot possible threats, unusual behaviour, and indicators of compromise.
• Carry out incident triage and response activities, including investigation, containment, threat analysis, and remediation.
• Review and assess security logs from multiple sources to identify suspicious events and possible breaches.
• Support vulnerability assessments and security reviews to uncover weaknesses in systems and applications.
• Prepare and maintain clear records of incidents, findings, and corrective actions taken.
• Work with the IT team to roll out patches, updates, and other preventative security controls.
• Stay informed about new threats, vulnerabilities, and current best-practice approaches in cyber security.
• Assist with building and enforcing information security policies and procedures.
• Contribute security reporting and metrics for management, governance, and compliance purposes.

Experience and capability requirements

• The work is defined, although the appropriate method, technology, process, or equipment must be chosen from several available options.
• Support and guidance may be available while decisions are being made.
• A solid grasp of the technology, processes, and procedures relevant to the operating unit is expected.
• The role requires awareness of the responsibilities of senior staff, the unit’s longer-term objectives, and the broader organisation’s goals.
• Applicants should understand how the position fits into its organisational setting, including relevant policies, regulations, and established precedents.
• Time management, prioritisation, and the ability to organise personal work and supervised work to meet set targets efficiently and on schedule are important.
• Basic understanding of personnel practices is required, including equal employment opportunity, occupational health and safety, and employee training and development.
• The role also requires the ability to gain cooperation from customers, members of the public, and colleagues when delivering defined activities or supervising others.

Qualifications and technical background

• A degree or diploma with limited directly relevant experience is acceptable, as is an equivalent mix of lower formal qualifications together with relevant skills and experience.
• Experience across a broad cyber security landscape is expected, with knowledge in areas such as identity management, endpoint protection and response, security operations and governance, vulnerability management, web and email filtering, DNS security, server and endpoint security, database security, cryptography and PKI, network security, cloud platforms, and SaaS application security concepts.
• Relevant platforms and technologies include Entra ID, Trend, Microsoft Defender, ISO 27001, E8, PCI DSS, VPDSF, Rapid7, Cisco Secure Access, Abnormal, SPF, DKIM, DMARC, Microsoft Server, Microsoft Endpoint, SQL Server, Microsoft Certificate Authority, Fortinet, Cisco, Meraki, Microsoft 365, Azure, and TechnologyOne.

Additional information

This is a child-safe workplace and an equal opportunity employer. The Council welcomes applications from people of all ages, people with disability, Aboriginal and Torres Strait Islander people, LGBTIQA+ people, and people from culturally diverse backgrounds.

As part of the recruitment process, shortlisted candidates will need to complete reference checks, a Working with Children Check, and a Criminal Record Check.

The organisation offers a competitive salary package, professional development opportunities, and a supportive working environment.

Applications are assessed on an ongoing basis during the advertising period, and the vacancy may close early once enough suitable applications are received. Early submission is recommended.

For enquiries, contact [email protected].

Position documentation: PD - Security Analyst.

About the employer

Hume City Council values inclusion, collaboration, continuous improvement, teamwork, accountability, and community-focused outcomes. Its workplace culture is built around trying new approaches, learning from experience, supporting one another, delivering on commitments, and putting the Hume community first.