Cybersecurity Analyst, Level 1

Datacom

full-time

Posted on: 9/24/2025

Origin: • 🇳🇿 New Zealand

✨ AI Apply

JuniorMid-Level

Cyber SecurityFirewalls

About the role

Analyse security events of interest and perform security event analysis
Oversee incidents from initiation through to resolution and adhere to incident response protocols
Review and respond to alarms/tickets and log and escalate tickets
Conduct initial triage and incident response investigations
Handle Events of Interest escalations and identify policy changes required based on analysis
Develop security use cases and correlation rules; perform threat hunting
Detect security breaches, evaluate existing security risks and implement enhancements
Conduct research on security improvements and provide recommendations to customers
Stay up-to-date on latest security trends and standards and participate in incident response planning and execution
Work as part of Datacom's Cybersecurity Defence Operations Centre (SOC) in Auckland supporting commercial and government customers
Role is CDOC and is 24/7 shift/roster based (days and nights) with a shift allowance

New Zealand citizen who has lived in NZ for at least 5 years and ability to pass additional background and security requirements
Availability for 24/7 shift/roster (work both days and nights)
Working knowledge of Security Information & Event Management (SIEM) and Endpoint Detection and Response (EDR) concepts and functionality
Knowledge of networks, firewalls, proxies, intrusion detection/prevention systems
Familiarity with security industry frameworks: NIST 800-61 Rev. 2, ACSC ISM and Essential Eight
Knowledge of cyber-attack methodologies and frameworks such as MITRE and Lockheed Martin Cyber Kill Chain
Knowledge of Microsoft Windows domain technologies (e.g. Active Directory)
ITIL knowledge
CompTIA Security+ study or certification; CompTIA Analyst desirable
Have been working in IT for the last 2 years
Have at least 1 year working with Security tools and Frameworks
Effective communication skills to convey complex security concepts to technical and non-technical stakeholders