Lead Analyst, Digital Security

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone. As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives. To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone. If you believe in developing a better tomorrow, read on. About the Role The Security Platform Operations & Engineering Specialist is responsible for the operation, maintenance, enhancement, and support of enterprise security platforms, including SIEM, SOAR, and Data Security solutions. This role combines platform operations, engineering, automation, incident management, compliance support, and stakeholder engagement responsibilities. The successful candidate will play a key role in ensuring security platforms remain stable, scalable, compliant, and aligned with business and regulatory requirements Key Responsibilities Security Platform Operations • Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms. • Monitor platform health, service availability, performance, and capacity utilization. • Perform proactive platform maintenance, system tuning, and health checks. Platform Engineering & Automation • Support platform deployment, upgrades, migrations, and patch management activities. • Design, implement, and maintain integrations between security platforms and enterprise systems. • Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning. • Support onboarding of new data sources, use cases, and security technologies. • Create and maintain technical documentation, operational manual, and standard operating procedure. Incident & Problem Management • Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues. • Coordinate with internal teams, vendors, and external partners to resolve complex technical problems. • Continuously track, monitor, and follow up on Incidents, Changes, and Problems throughout their lifecycle. • Conduct root cause analysis (RCA) and implement corrective and preventive actions. • Participate in major incident management activities and service restoration efforts. Audit, Compliance & Governance Support • Partner with Internal Audit teams to support audit activities. • Provide audit evidence, operational documentation, system records, and technical explanations when required. • Support remediation activities arising from audit findings and compliance assessments. • Ensure security platforms operate in accordance with organizational policies, standards, and regulatory requirements. Stakeholder Engagement • Manage and fulfill user requests within agreed service levels. • Provide technical support and consultation to BU security, infrastructure, and application teams. • Collaborate with BU stakeholders on platform enhancements and operational improvements. • Participate in project delivery and platform transformation initiatives. Required Qualifications Experience • At least 2-3 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations. • Experience supporting enterprise-scale security platforms in production environments. • Experience working within Incident, Problem, and Change Management processes. • Experience supporting audit, compliance, or regulatory requirements is preferred. Technical Skills Security Platforms • Hands-on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred. • Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR. • Understanding of security monitoring architecture and log management concepts. Infrastructure & Cloud • Strong knowledge of Linux and Windows administration. • Experience with Microsoft Azure services and cloud operations. • Hands-on Kubernetes (K8S) administration and troubleshooting experience. • Understanding of networking fundamentals, including DNS, TCP/IP, HTTP/HTTPS, Syslog, and security-related protocols. Automation & Integration • Experience in Python and/or PowerShell scripting. • Experience with REST APIs based system integrations. • Experience automating operational tasks and platform management activities. • Experience leveraging AI-powered tools (e.g., Microsoft Copilot) to improve operational efficiency, automate repetitive tasks, accelerate troubleshooting, enhance documentation quality, and support platform engineering activities. ________________________________________ Preferred Qualifications • Experience with: o Google SecOps, Splunk, QRadar SIEM & SOAR o BigID Data Discovery o ServiceNow o Azure Administrator Operation o Kubernetes Platforms • Professional certifications such as: o Security Certifications such as CISSP / CCSP. o Azure Certifications such as SC-500, AZ-104 o CKA - Certified Kubernetes Administrator o ITIL v4 Foundation Certification. ________________________________________ Key Competencies • Strong troubleshooting and analytical skills. • Ability to work independently and manage multiple priorities. • Proactively utilizes AI-powered tools to improve productivity, problem-solving, automation, and overall operational effectiveness. • Strong ownership and accountability mindset. • Excellent communication and stakeholder management skills. • Ability to collaborate effectively across BU and cross-functional teams. • Commitment to operational excellence and continuous improve…