Cyber Response

TechBrain is a leading Perth, Australia IT company that empowers businesses to thrive through innovative technology solutions. We partner with our clients to understand their unique needs and deliver a range of IT services.

We have an opportunity for an experienced Cyber Response Specialist to join our team, supporting threat detection, security monitoring and incident response activities across customer and internal environments. Working as part of our growing cyber capability, you will help investigate alerts, classify incidents, support containment and recovery activities, and contribute to the delivery of effective cyber security outcomes for our clients.

·         Security Monitoring – Monitor and triage security alerts across SIEM, EDR/XDR, Microsoft 365, endpoint, network and cloud environments, accurately identifying false positives and escalating genuine security incidents as required.

·         Incident Triage – Conduct initial incident classification by assessing the severity, impact and priority of security events against established criteria.

·         Incident Response – Support containment, eradication and recovery activities during confirmed or suspected cyber security incidents.

·         Threat Investigation – Analyse logs, endpoint data, identity events and security telemetry to establish context, understand attacker activity, determine root cause and assess potential impact.

·         Client Communication – Maintain clear and timely communication with internal stakeholders and customers, providing incident notifications, investigation updates and status reports as required.

·         Documentation and Reporting – Maintain accurate records of security events, investigations and response activities, and prepare clear incident notes, investigation summaries, recommendations and client-facing reports.

·         Vulnerability Management – Assist with vulnerability scanning, reviewing findings, tracking remediation and supporting closure of security improvements.

·         Post-Incident Review – Contribute to lessons learned, post-incident reviews and continuous improvement of incident response processes.

·         Security Process Improvement – Support the development and maintenance of incident response plans, playbooks, security documentation and operational procedures.

·         Cyber Security Support – Work with internal teams and clients to improve security posture across Microsoft 365, endpoint protection, identity, networking and cloud environments.

·         Continuous Learning – Stay current with emerging threats, attacker techniques and security best practices to help strengthen TechBrain’s cyber security service offering.

·         Experience in cyber security operations, incident response, SOC analysis, managed services, IT security, infrastructure support or a closely related technical role.

·         Strong understanding of Microsoft 365 security, endpoint protection, identity and access management, networking fundamentals and cloud security concepts.

·         Hands-on exposure to tools such as Microsoft Defender, Sentinel, SIEM, EDR/XDR, vulnerability management platforms or similar technologies.

·         Ability to investigate security alerts, interpret logs, identify suspicious activity and communicate findings clearly.

·         Excellent written and verbal communication skills, including the ability to explain technical issues to both technical and non-technical stakeholders.

·         A practical, calm and methodical approach to problem solving, especially during time-sensitive incidents.

·         Strong attention to detail and a commitment to accurate documentation, ticket updates and reporting.

·         A genuine interest in cyber security, threat response, continuous learning and improving client outcomes.

·         Relevant certifications such as Security+, SC-200, AZ-500, CySA+, GCIH, GCFA, CEH or similar will be highly regarded.

·         A current Australian Government Clearance, or the ability to obtain and maintain one, would be highly regarded.

·         Pair of funky socks when you start and every birthday!

·         Monthly and quarterly employee awards and events!

·         Training encouraged and supported by the business!

·         Flexible working / 1 day per week once approved by line manager.

·         Work with a supportive Perth-based team in a growing cyber security capability.

·         Develop your cyber security skills across real-world client environments, modern security platforms and a broad range of industries.