Hire a Cybersecurity Analyst.
Alerts triaged, vulnerabilities tracked, evidence kept.
Also called: SOC Analyst, Security Analyst, Information Security Analyst
From AUD $7.50 an hourAUD $7.50-33/hr
- IT & managed services
- Financial services
- Healthcare
- Works your hours
- Philippines hub, 2 to 3 hours behind Sydney
- Month to month
- Works the alert queue in Microsoft Sentinel, Defender XDRMonitoring and alert triage
- Investigates reported phishing and business email compromiseIncident investigation and response support
- Runs and reviews scans in Nessus, Qualys, Rapid7 InsightVM or OpenVASVulnerability management
- Collects and maps evidence to Essential Eight maturity levelsCompliance and evidenceDoing
- Microsoft Sentinel
- Microsoft Defender XDR
- Microsoft Defender for Office 365
- Microsoft Entra ID Protection
- Splunk
- Elastic Security
Pick the level. See the price.
AUD $7.50an hour
Level 1 of 4, also called junior.Triages alerts and user-reported phishing against playbooks and enriches indicators.
- Triaged alerts with complete case notes
- Phishing report responses
- Scan runs and evidence collection sheets
AUD $12.50an hour
Level 2 of 4, also called mid-level.Investigates incidents end to end at Tier 2.
- Incident investigation reports
- KQL or SPL query library
- Prioritised vulnerability reports
AUD $19an hour
Level 3 of 4, also called senior.Leads investigations of medium-severity incidents and designs and tunes detection use cases.
- Incident response reports and executive briefs
- Detection use cases and tuning plans
- Essential Eight or ISO 27001 gap assessment with roadmap
AUD $33an hour
Level 4 of 4, also called lead or specialist.Owns the security programme: strategy and roadmap, incident response plan and exercises.
- Security strategy and roadmap
- Incident response plan and tabletop exercise report
- Risk register with executive reporting
Per hour, all-in: recruiting, testing and management. Prices exclude GST.
What you hand to your Cybersecurity Analyst
Tasks
Monitoring and alert triage
- Works the alert queue in Microsoft Sentinel, Defender XDR
- Enriches indicators using VirusTotal, URLScan and AbuseIPDB, decide true
- Tunes detection rules and suppress known-benign noise
Incident investigation and response support
- Investigates reported phishing and business email compromise
- Contains confirmed threats under the client's approval matrix
- Builds incident timelines
Vulnerability management
- Runs and reviews scans in Nessus, Qualys, Rapid7 InsightVM or OpenVAS
- Prioritises findings by severity, exploitability
- Verifies fixes with re-scans
Compliance and evidence
- Collects and maps evidence to Essential Eight maturity levels
- Maintains the risk register and policy review calendar
Awareness and posture review
- Designs and runs phishing simulations and short training
- Reviews Microsoft Secure Score, MFA coverage, admin roles
Week one
- Approval matrix and escalation contacts
- Incident response plan, playbooks and case-management or PSA seat
- Written authorisation for every vulnerability scan target range
- Half a day shadowing an experienced analyst
Tools
Work tools
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Defender for Office 365
Microsoft Entra ID Protection
- CrowdStrike Falcon
- SentinelOne
- Huntress
Splunk
Elastic Security
- Wazuh
- Blumira
- Nessus
Qualys
- Rapid7 InsightVM
- OpenVAS
- Vanta
- Drata
- KnowBe4
Tested live in the tools on your job description.
AI tools
Microsoft 365 admin settings
Microsoft 365 Copilot
Intune
Entra ID
Microsoft Purview
Google Admin console
Gemini for Google Workspace
GitHub Copilot
ChatGPT
Claude
Tested in the AI features of the tools you use, including catching the AI's mistakes.
Works inside your Microsoft 365 or Google Workspace, under your admin settings.
- Microsoft 365Copilot
- Google WorkspaceGemini
AI
AI speeds up triage, scripts and knowledge articles. Your Cybersecurity Analyst tests every change before it touches your systems.
Ticket triage and first replies
AI sorts and drafts first responses. Your Cybersecurity Analyst checks and resolves.
Scripts with AI help
PowerShell or Bash drafted with AI, then tested in a sandbox before production.
Knowledge articles
Resolved tickets turned into how-to articles, checked step by step.
Copilot and Gemini administration
Licences, data access, sensitivity labels and AI settings in Microsoft 365 and the Google Admin console, set to your policy.
Our rule: business-grade AI only, never free or personal accounts.
Prefer no AI on a task? Tell your Cybersecurity Analyst and they won't use it.See AI & automation roles
Tested before you meet them
- Security Fundamentals TestAll levels40 min
- Alert Triage SimulationAll levels45 min
- Phishing and Business Email Compromise InvestigationAll levels45 min
- Log Query ExerciseIntermediate and up45 min
- Vulnerability Prioritisation CaseAll levels40 min
- Framework Mapping and Executive BriefIntermediate and up60 min
Sample shown
84%
- Skills tested: A skills test for the role, marked by a senior
- English and comms: written English tested, spoken English checked on a call
- ID, work history and references: photo ID, past roles and two referees
From booked call to day one
Step 1: Book a demo
Tell us the role, your hours and your tools.
Step 2: Meet your shortlist
Their level and hourly price, tested before you meet.
Step 3: Pick your person
Month to month. We handle the contract, the equipment and the onboarding, and make sure it all runs.
Step 4: They start work
In your tools, within 12 to 48 hours of a successful interview.
Questions answered
An Intern Cybersecurity Analyst is AUD $7.50 an hour, Intermediate AUD $12.50, Expert AUD $19 and Specialist AUD $33, full time (38 hours a week). That is all-in: recruiting, testing and management, month to month. Prices exclude GST.
Monitoring and alert triage, incident investigation and response support, vulnerability management and compliance and evidence, run to your priorities. You choose what they own first.
Six practical tests, marked by a senior, including security Fundamentals Test, alert Triage Simulation and phishing and Business Email Compromise Investigation. You see the score before you meet.
Tell us and we replace them free, with a new shortlist of tested people to meet. Seats are month to month with 30 days' notice.
Meet the people who fit your work.
A 15‑minute call on Teams. You leave knowing the level you need and its hourly price.