Archie ***

CAREER SUMMARY

Information Security Analyst with 8 years of experience in information security, cybersecurity operations and IT risk management across Sydney, NSW. Experienced in security monitoring, incident response, vulnerability management, access control, security risk assessment, compliance and security governance. Strong hands-on experience analysing security alerts, investigating incidents, identifying vulnerabilities and working with IT teams to implement appropriate security controls. Experienced in supporting security audits, policy development, risk registers and compliance activities within corporate environments. Strong analytical, communication and problem-solving skills with a practical approach to protecting business systems, information and digital assets.

EDUCATION

University of Technology Sydney, Sydney NSW
Bachelor of Science in Information Technology — Cybersecurity and Networks, February 2014 – November 2017

EXPERIENCE

Australian Financial Services Group, Sydney NSW — Information Security Analyst
January 2023 – September 2026

Monitor information security events and alerts across corporate systems, applications, endpoints and network environments using SIEM and security monitoring platforms.

Investigate suspected security incidents, phishing attempts, malware alerts, suspicious login activity and potential unauthorised access.

Perform security investigations by analysing system logs, authentication records, endpoint activity and network events.

Coordinate incident response activities with IT infrastructure, service desk, network, cloud and application teams.

Conduct vulnerability assessments and track remediation activities to reduce identified security risks.

Perform regular user access reviews and support identity and access management processes, including privileged access reviews and role-based access controls.

Monitor endpoint security controls and work with technical teams to investigate and remediate security issues.

Maintain security incident records, investigation reports, risk registers and other information security documentation.

Support internal and external security audits by preparing evidence, reviewing controls and coordinating responses with relevant stakeholders.

Assist with information security risk assessments for new systems, applications, vendors and technology projects.

Review security policies, standards and procedures and support the implementation of updated security controls.

Provide security advice to business and technology teams regarding access management, data protection, phishing, authentication and secure system practices.

Monitor emerging cybersecurity threats and assess their potential impact on the organisation.

Support security awareness programs and communicate practical security guidance to employees.

Technology Solutions Australia, Sydney NSW — Security Analyst
January 2021 – December 2022

Monitored security alerts and investigated suspicious activities across enterprise IT environments.

Analysed SIEM alerts, system logs, authentication events and endpoint activity to identify potential security incidents.

Investigated phishing emails, malware detections, suspicious user behaviour and unauthorised access attempts.

Performed vulnerability scans using security assessment tools and coordinated remediation with infrastructure teams.

Supported endpoint protection, antivirus and EDR administration across corporate devices.

Conducted regular access reviews and assisted with user provisioning, deprovisioning and privileged access management.

Assisted with firewall and network security monitoring and escalated potential threats to senior security personnel.

Prepared incident reports, investigation summaries and security metrics for management review.

Supported internal security audits, compliance assessments and control testing.

Assisted with security risk assessments for technology projects and third-party service providers.

Developed and maintained security procedures, operational documentation and incident response playbooks.

Provided security guidance to employees on phishing prevention, password security, MFA and safe handling of sensitive information.

Sydney IT Services, Sydney NSW — Junior Information Security Analyst
January 2019 – December 2020

Supported daily security monitoring and incident management activities across corporate IT environments.

Reviewed security alerts and escalated suspicious events to senior security analysts for further investigation.

Assisted with vulnerability scanning, patch management and security configuration reviews.

Supported user access management and regular reviews of employee and privileged accounts.

Assisted with endpoint security administration, antivirus monitoring and security software deployment.

Investigated phishing emails, suspicious attachments and potential malware incidents.

Maintained accurate security records, incident tickets and technical documentation.

Supported security audits and compliance activities by collecting evidence and maintaining control documentation.

Worked with infrastructure and service desk teams to resolve security-related issues.

Assisted with employee security awareness activities and prepared basic security guidance materials.

TECHNICAL SKILLS

Information Security: Security monitoring, incident response, security investigations, vulnerability management, risk assessment, security controls, information protection

Security Operations: SIEM monitoring, alert investigation, incident triage, log analysis, threat detection, incident reporting

Identity & Access Management: Active Directory, Microsoft Entra ID, user access reviews, RBAC, MFA, privileged access management

Security Tools: Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike, Nessus, Qualys, Wireshark

Network Security: Firewall monitoring, VPN, IDS/IPS, network traffic analysis, TCP/IP, DNS

Risk & Compliance: Information security risk assessments, security audits, control testing, risk registers, security policies, compliance reporting

Endpoint Security: EDR, antivirus, endpoint protection, device compliance, patch management and security hardening

Cloud & Microsoft Security: Microsoft Azure, Microsoft 365, Entra ID, Defender for Endpoint, cloud access controls

Professional Skills: Analytical thinking, investigation, problem-solving, stakeholder communication, documentation, attention to detail, teamwork and time management

EDUCATION

2014-02 to 2017-11
Bachelor of Science in Information Technology — Cybersecurity and Networks — University of Technology Sydney, Sydney NSW

SKILLS

Information Security | Cybersecurity | Security Analysis | Security Operations | SOC | Incident Response | Threat Detection | Security Monitoring | SIEM | Microsoft Sentinel | Splunk | Microsoft Defender | CrowdStrike | Vulnerability Management | Risk Assessment | Security Auditing | Security Compliance | Identity & Access Management | Active Directory | Microsoft Entra ID | MFA | Privileged Access Management | Endpoint Security | EDR | Network Security | Firewall | VPN | IDS/IPS | Log Analysis | Phishing Investigation | Malware Investigation | Security Controls | Security Governance | Security Policies | Risk Registers | Security Documentation | Security Awareness | Third-Party Risk | Microsoft 365 Security | Azure Security

Occupation: Information Security Analyst

Location: Sydney, New South Wales, Australia

Total Experience: 8 years


Skills: Information Security, Cybersecurity, Security Operations, CrowdStrike

Experience: 8 years

Daily rate: AUD 500

Fictional sample profile — replace with your approved candidate details.