Level 2 SOC Analyst Location

Perth Employment

Full-time, night shift 6pm-12am AWST, Wed-Sun About Baidam Solutions

Baidam Solutions is an Australian-owned cybersecurity services provider with a strong social impact mission. We partner with First Nations communities, customers, and global technology providers to deliver leading-edge security solutions while creating pathways for Indigenous participation in the ICT industry.

Our Security Operations Centre (SOC) is growing, and we are seeking talented Level 2 SOC Analysts who are passionate about defending organisations against cyber threats, improving detection and response processes, and contributing to a skilled and diverse cyber workforce in Australia.

Why Join

Us

Competitive salary and clear progression pathways into senior cyber security roles.

Investment in ongoing training and industry-recognised certifications, including SANS, Microsoft, CrowdStrike and Splunk.

Hybrid working flexibility within a supportive, collaborative and multicultural team environment.

Hands-on exposure to leading security technologies, including Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon Next-Gen SIEM, SOAR and advanced threat intelligence platforms.

The opportunity to join a purpose-driven organisation that delivers measurable social impact. Key Responsibilities

Investigate, validate, triage and respond to security alerts and incidents across Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon Next-Gen SIEM, EDR/XDR, SOAR and cloud security platforms.

Perform deeper technical analysis of complex incidents across endpoint, identity, cloud and network environments, and escalate matters requiring specialist or senior support.

Lead or support incident response activities for escalated security events, including containment, eradication, recovery and post-incident review.

Conduct proactive threat hunting using telemetry from CrowdStrike Falcon, Microsoft Sentinel, Microsoft Defender XDR and other security technologies.

Onboard new customers, data sources and security technologies into the SOC, including validating data quality, parsing, normalisation and end-to-end alerting.

Develop, test, tune and maintain detection rules, correlation logic and analytics to improve coverage, increase alert fidelity and reduce false positives.





Create and maintain KQL and other investigation queries, analytics rules, automation workflows, SOAR playbooks and investigation documentation.

Identify gaps in visibility, logging, telemetry and detection coverage, and recommend practical improvements.

Work directly with customers to investigate incidents, communicate findings and provide clear, actionable technical recommendations.

Produce high-quality documentation, including incident reports, post-incident reviews, knowledge articles, investigation procedures and SOC playbooks.

Support the continuous improvement of SOC processes, playbooks, response procedures, detections and operational maturity.

Mentor Level 1 SOC Analysts, assist with complex investigations and contribute to the ongoing development of the wider SOC team.

Stay current with emerging threats, vulnerabilities, attacker techniques and modern detection engineering practices.

Participate in an on-call rotation to support incident escalation and operational requirements outside standard business hours. What We're Looking For

Skills and Experience

Previous experience working in a SOC, security operations, cyber defence or incident response role is mandatory.

Hands-on experience investigating, validating and responding to security alerts and incidents.

Experience performing Level 2 analysis and managing complex investigations across Windows, Microsoft 365, Azure, endpoint, identity and cloud environments.

Experience onboarding customers, log sources, security products or data integrations into a SIEM platform.

Experience developing, testing and tuning security detections, correlation rules and alert logic.

Strong practical knowledge of Microsoft Sentinel, Microsoft Defender XDR and CrowdStrike Falcon Next-Gen SIEM.

Experience with enterprise SIEM platforms such as Microsoft Sentinel, CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps or similar.





Experience with EDR/XDR platforms, SOAR technologies and security automation workflows.

Familiarity with KQL, SPL or similar query languages; basic PowerShell or Python scripting capability is desirable.

Understanding of common attack techniques, identity threats, endpoint security, cloud security and the MITRE ATT&CK; framework.

Ability to identify security gaps and translate technical findings into practical improvements.

Strong written and verbal communication skills, with the ability to engage effectively with technical and non-technical stakeholders.

A proactive, collaborative approach to problem-solving and continuous improvement.

Ability to prioritise multiple incidents in a fast-paced, 24x7 managed SOC environment.

Essential

Experience

Experience working within a Managed Security Service Provider (MSSP) or customer-facing managed SOC environment.

Demonstrated hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and CrowdStrike products.

Experience supporting multiple customer environments and balancing competing operational priorities.

Security

Knowledge

Incident response and security operations best practice.

Threat intelligence and threat hunting.

Malware analysis fundamentals and digital forensics concepts.

MITRE ATT&CK; framework and Cyber Kill Chain.

Microsoft Azure and Microsoft 365 security.

Clearance

Requirements

Australian Citizenship is required.

Ability to obtain and maintain an Australian Government Security Clearance.

Desirable

Certifications

CrowdStrike Falcon Administrator or Falcon Hunter

Microsoft SC-200

Microsoft AZ-500

CompTIA Security+

GIAC GCIH or GCIA

Security Blue Team certifications Salary and Advantages

Salary range of AUD $110,000-$140,000 plus superannuation, depending on experience.

Dedicated training budget for Microsoft, CrowdStrike and SANS certifications.

Exposure to enterprise government, critical infrastructure and commercial environments.

Career pathways into Senior SOC Analyst, Detection Engineer, Incident Response and Threat Hunting roles.

Indigenous mentoring, education programs and career pathways unique to Baidam Solutions.

Flexible hybrid work model with SOC presence in Sydney, Brisbane and Perth.

📌 Security Operations Center Analyst (Perth)
🏢 Baidam
📍 Perth