Cyber Security Analyst

Perenti is an ASX200 diversified global mining services group with interests in contract mining, mining support services and future technology solutions. The Group was founded in Kalgoorlie in 1987 and is today one of the world’s largest mining service companies providing surface and underground mining at scale. Our portfolio consists of sustainable, inter-related and value-adding mining services and technology focused businesses. Headquartered in Perth, Australia, and operating across four continents, our focus is to create enduring value and certainty for our investors, clients, employees and the communities in which we operate.

Perenti is seeking a high-performing Cyber Security Analyst to strengthen and evolve our global Security Operations capability. This role is not a traditional SOC analyst position. You will play a key role in advancing our NextGen SIEM, SOAR, and AI-enabled detection and response capabilities, helping transform our operations from reactive monitoring to intelligence-led, automated, and proactive cyber defence. Working within a globally distributed mining services environment, you will help protect critical support systems, mining operations technology, and corporate platforms across multiple regions.

Key responsibilities for the role are to:

• Stay abreast of current and emerging cyber threats and vulnerabilities relevant to the organisation and region, and drive remediation planning in collaboration with operational teams.
• Investigate and respond to security incidents, leading analysis and coordinating effective remediation actions across complex enterprise environments.
• Monitor, maintain, and optimise SIEM and security platforms to detect, analyse, and respond to malicious or anomalous activity.
• Develop and continuously improve detection use cases, correlation rules, and alerting logic to increase detection coverage and reduce false positives.
• Conduct proactive, hypothesis-driven threat hunting to identify previously undetected threats and exposures.
• Support and contribute to incident response exercises and tabletop simulations to strengthen organisational readiness.
• Design, develop, and implement security automation and orchestration workflows (SOAR), including playbooks, scripting, and system integrations.
• Identify and deliver opportunities to improve operational efficiency through automation, orchestration, and platform integration.
• Leverage and support the adoption of AI-driven capabilities, including agentic AI, to enhance alert triage, investigation workflows, and response effectiveness.
• Contribute to the development and management of AI agents aligned to defined security use cases and operational workloads.
• Support and optimise security platforms, including CrowdStrike Falcon and other security technologies.
• Maintain and enhance SOC documentation, including playbooks, procedures, reports, and operational artefacts.
• Apply vulnerability management practices to support identification, prioritisation, and remediation of security exposures.
• Support security assessments, control reviews, and continuous improvement initiatives to strengthen organisational cyber resilience.
• Contribute to security awareness initiatives and phishing simulation programs where required.
• Drive continuous improvement across Security Operations processes, tools, and capabilities to enhance overall effectiveness.

Key skills required for the role are:

• Minimum 3+ years’ experience across cyber security disciplines, ideally within Security Operations or Incident Response domains.
• Hands-on experience with SIEM and / or SOAR platforms, including detection rule development, alert tuning, and dashboarding.
• Strong understanding of contemporary cyber threats, threat hunting techniques, and incident response processes.
• Experience working with Microsoft Azure / M365 security stack and endpoint protection platforms such as CrowdStrike.
• Understanding of cyber security frameworks and methodologies (MITRE ATT&CK, Cyber Kill Chain etc.).
• Exposure to automation, scripting, or orchestration technologies (e.g. Python, PowerShell, or platform-native automation).
• Familiarity with AI or machine learning applications within cyber security operations.
• Strong analytical and problem-solving capabilities, with a methodical and outcomes-driven approach.
• Excellent written and verbal communication skills.

As a Company, we seek high performing resilient employees and promote a collaborative working culture. Our Employee Benefit program acknowledges our employees with extensive offers from corporate partners including novated leasing, health insurance discounts, travel / accommodation benefits, flexible working opportunities, and parental leave provisions.

We strive to create an inclusive environment for all employees.