Telstra

Shift Lead at Telstra Cyber Defence

Mentoring analysts, handling escalations, major incidents, complex investigations; general senior SOC analyst duties.

Cyber Security Operations Shift Lead (secondment)

Cyber Defence, which is Telstra's internal SOC, is essential in providing an orchestrated and rapid security incident response capability with an oversight of security incident response across wider Telstra and service. Cyber Defence provide a heightened level of incident communication in real time to senior management, business representatives, stakeholders, and technical staff. 

Some key responsibilities include:
• Initiate and drive technical bridges for high-severity cyber security incidents to achieve the shortest achievable customer & security incident resolution.
• Monitoring, hunting, investigating, and remediating cyber security incidents via SIEM, EDR, etc
• Conducting forensic investigations, incident response, and threat hunting.
• Writing up technical executive summaries of high-severity incidents to then distribute to senior management and other relevant stakeholders.
• Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event
• Creating and remediating Problem Management Investigations for long-standing/reoccurring incidents.
• Help create and test/tune correlation rules for SIEMs.

Cyber Security Analyst

Kaine Mathrick Tech Technology Provider Melbourne

I decided to transition my SOC role to part-time to free up some more time to study. My main goal was to learn more about offensive security and penetration testing. I was looking at the eJPT(completed) and OSCP(not yet completed) in particular.

Certifications attained during this time:
- ICCA - INE Certified Cloud Associate
- Cisco Certified CyberOps Associate (CBROPS 200-201, Formerly CCNA CyberOps)
- EC-Council Certified Encryption Specialist (E|CES)
- eLearnSecurity Junior Penetration Tester (eJPT)

SOC Analyst

As the very first member to join the Team Leader of KMT’s newly created Security Operations Centre (SOC), I held a unique role combining the responsibilities of a Security Engineer and SOC Analyst. I was involved in implementing security measures, running audits, and rolling out new tools, on top of operations (detection and response).

I was responsible for multiple projects to onboard clients to the company's MSSP offering. One of the main focuses was to bring customers into compliance with the ACSC Essential Eight model’s Maturity Level 2.

Some projects I was responsible for include but are not limited to:
- client weak password audit and remediation
- server & network equipment patching audit and remediation
- app control solution rollout
- weak network share permission audit and remediation
- workstation local administrator and Active Directory domain administrator permission assignment audit and remediation
- commissioning of Linux Syslog servers to receive Firewall log traffic (in certain cases TLS encrypted)
- SIEM instance creation and tenancy linkage for new clients

When I wasn't setting up new clients for our MSSP offering, I responded to threats via our SIEM and EDR tools - Identifying and discarding false positives, and taking remediation action following standard incident response processes for true positives.

During this role, I was also involved in managing the Security Awareness Training (SAT) provided to our cyber clients. This consisted of onboarding clients to our third party SAT tool, configuring training frequency, manually running phishing simulations, and communicating the results with stakeholders effectively and efficiently.

Certifications attained during this time:
- CompTIA Network+ (N10-008)
- CompTIA IT Operations Specialist (CIOS)
- CompTIA Security+ (SY0-601)
- CompTIA Secure Infrastructure Specialist (CSIS)
- NSE1 - Network Security Expert 1

Working at an MSP served as a unique learning experience as I worked on so many distinct environments, each with different technology stacks, procedures, software & hardware which gave me an immense amount of experience, and taught me key problem-solving and critical thinking skills required of any successful IT professional.

During this time, I would provide IT support to the company's managed IT service clients, perform server maintenance tasks, and other miscellaneous IT-related work such as onsite equipment installation,  commissioning and building laptops and workstation builds, as well as decommissioning them (drilling holes in HDDs :D), etc.

Certifications attained during this time:
- Microsoft 365 Certified: Fundamentals (MS-900)
- Microsoft Certified: Azure Fundamentals (AZ-900)
- Microsoft 365 Certified: Teams Administrator Associate (MS-700)
- CompTIA A+ (220-1001, 220-1002)

Service Desk Technician

Passionate and driven cyber-security specialist with a background in software development and experience across IT and Security Operations.

Taplio

Tane Robertson's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Tane Robertson's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Tane Robertson's Linkedin Analytics