Cyber Threat Response Analyst | Adversary Operations
Macquarie Group · Sydney, Australia · 2mo ago
Mid levelOn-siteSecurity
Join our diverse and global Cyber Threat and Incident Response team within the Cyber Security Department of our Technology division. This role is based in our Sydney office within our Cyber Threat Defense team.
We are a global financial services group operating in 30 markets with 57 years of unbroken profitability. At Macquarie, you’re empowered to shape a career that is fulfilling and creates value. You will bring your insights and expertise to the task at hand and feel supported as you make your own kind of impact for a better future.
In this role, you will be responsible for performing hypothesis driven threat hunting, where you will combine behavioral threat intelligence, controls-based research, and defensive cyber expertise to identify improvements to Macquarie’s overall cybersecurity posture. You will conduct proactive, intelligence-driven threat hunting across Macquarie’s global environment, using attacker TTPs, behavioral analytics, and large-scale telemetry (EDR, SIEM, TIP) to identify previously undetected threats. You will perform threat modeling, execute structured hypothesis driven hunts, uncover detective and preventative control gaps, and translate findings into actionable improvements in collaboration with our Security Operations and Detection Engineering teams. This role will require a continuous learning mindset and strong technical fundamentals, including security operations expertise, utilization of AI skills, adversarial techniques, and the operational application of frameworks like MITRE ATT&CK and MITRE ATLAS.
- Experience in aggregate log analysis (Splunk, Google SecOps, or others) and with an Endpoint Detection and Response platform
- Ability to translate technical findings into actionable insights and communicate those to technical and non-technical stakeholders, with a focus on detail-oriented delivery
- Offensive security/adversarial mindset and knowledge of threat actor TTP’s
- Experience threat hunting in an enterprise infrastructure, including Windows/Linux systems, Active Directory, cloud platforms, and identity systems
- Minimum of 4 years of related security or technology experience in enterprise environments with a focus on threat hunting, security operations, or pen testing.
We love hearing from anyone inspired to build a better future with us, if you're excited about the role or working at Macquarie we encourage you to apply.
At Macquarie, you’re empowered to shape a career that’s rewarding in all the ways that matter most to you. Macquarie employees can access a wide range of benefits which, depending on employment type, include:- 1 wellbeing leave day per year
- Up to 5 additional service bonus leave days per year
- Up to 20 weeks’ paid parental leave for primary caregivers along with 12 days of transition leave upon return to work, and 6 weeks’ paid leave for non-primary caregivers
- 2 days of paid volunteer leave and donation matching
- Up to 12 months’ gender affirmation leave, including 6 weeks’ paid leave
- Access to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinations
- Access to a wide range of salary packaging options
- Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
- Hybrid and flexible working arrangements, dependent on role
- Reimbursement for work from home equipment
Technology enables every aspect of Macquarie, for our people, our customers and our communities. We’re a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow’s technology solutions.
We are committed to providing an inclusive environment for all, where different experiences, skills and perspectives are valued and respected. Macquarie provides access to opportunities for all individuals regardless of race, colour, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, genetic information, marital status, gender identity or any other characteristic or circumstance.
We provide reasonable adjustments to individuals who may need support during the recruitment process and employment. If you require an adjustment, please let us know during the application process.