Cyber threat management analyst, specialist

Core Responsibilities

1. Assists and responds independently to cyber security alerts, cyber incidents, or related security investigations. Identifies real-time complex attack patterns and suggests mitigation strategies.
2. Supports the processes, tools and measures to monitor and detect compromises, risks, vulnerabilities, network security threats, tools, and tactics used by modern and emerging threat actors. Facilitates security operations and incident response technologies and methodologies.
3. Develops, manages, maintains and enhances security controls (alerts, rules, policies, and signatures) for the security platforms.
4. Monitors the network environment for new and evolving cyber threats and provides preventive and remedial solutions. Identifies malicious activity by performing analysis on logs, traffic flows, and other investigative detective activities.
5. Conducts penetration testing, vulnerability assessments and threat modeling. Evaluates risks and makes recommendations.
6. Performs analysis and provides written assessments focused on threats, vulnerabilities, and technologies relevant to Vanguard infrastructure.
7. Collaborates with IT and business teams to ensure prompt and effective distribution of findings to address incidents in the most effective and efficient manner possible. Provides department support to the business on enterprise-wide security initiatives and projects.
8. Participates in special projects and performs other duties as assigned.

Qualifications

Minimum of three years related work experience, with two years experience in threat analysis. Undergraduate degree in a related field or the equivalent combination of training and experience. Must be obtain CISSP within one year of hire.

Additional Job Description

Data exposure risk remediation at enterprise scale: Leads technical execution of the Oversharing Remediation Program. It has delivered more than 1.33 million remediations across collaboration and cloud storage platforms. Data access risk analysis and governance: Analyzes complex permission models (organization-wide access groups, inherited and direct permissions, external and anonymous sharing links) to find and remediate overexposed sensitive data. Also designs remediation options for leadership decisions and supports AI and Copilot readiness. Cloud DLP policy design and implementation: Designs, builds and puts in place Cloud DLP policies across IaaS, PaaS and SaaS platforms. This includes detection logic for sensitive data, tuning policies to reduce false positives, and handling exceptions. Automation of DLP and data security posture: Engineers automated workflows across DLP, data exposure and data security posture management. Examples are automated quarantine of sensitive data, resolving and notifying data owners, fallback handling when no owner can be found, and change-approved remediation that runs continuously. Identity-driven access cleanup: Works with IAM teams to define criteria, exceptions and testing for removing stale and orphaned access, such as access held by disabled users. Aligns remediation logic with identity governance requirements.

What makes this skillset niche

Combines data exposure and access risk analysis, cloud DLP engineering, and security automation, and he works across the SOC, infrastructure, IAM and vendor teams to get changes approved through CAB. Few people have all of these skills, and this program knowledge would take a backfill a long time to learn.

Special Factors

Sponsorship: Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.