Job Description
Position Overview
n
SOC 2 Contract through **** Supporting APAC Time zones.
n
Responsibilities
n
n
Investigate security incidents and determine root causes.
n
Review incidents escalated by Tier 1 analysts, who collect data and review alerts.
n
Utilize threat intelligence—including indicators of compromise (IoCs), tactics, techniques, and procedures (TTPs), and company host, network data sets—to assess alerts, threats, and potential incidents in depth.
n
Develop and refine SIEM use cases, reduce/tune false alerts, and lead investigations until issues are resolved.
n
Monitor systems and events across Windows, macOS, and Linux operating systems.
n
n
Qualifications
n
n
Proactive, problem‐solver, and curious.
n
5+ years recent experience as a Tier 2 or Tier 3 analyst at a large organization; preference for government and critical‐infrastructure companies.
n
Strong, demonstrated SIEM and data correlation experience.
n
Experience designing new SOC use cases and working with vendors to implement them.
n
Experience designing and implementing runbooks to mitigate security incidents.
n
Experience designing incident‐response plans,



including alert definitions, runbooks, and escalation procedures.
n
Extensive experience reviewing and managing alerts in Microsoft Defender, Splunk, and/or CrowdStrike.
n
Proficient in conducting hunts across disparate data sets—host, vulnerability, threat, network, and Active Directory data—to identify threats.
n
Leadership in timely security‐operations response efforts in collaboration with stakeholders.
n
Documentation of incident‐response communications for technical and management audiences.
n
Ability to set up alert rules and manage alerts effectively.
n
Demonstrated ability to create runbooks and conduct investigations with key application, IT infrastructure, and other stakeholders.
n
Experience designing custom SOC SIEM use cases in Defender, Splunk, and CrowdStrike.
n
Experience conducting forensic investigations.
n
Analytical, qualitative, and quantitative abilities.
n
Adaptive to dynamic environment.
n
Solid security‐operations documentation abilities.
n
#J-*****-Ljbffr

📌 Soc 2 Analyst (New South Wales)
🏢 Plurilock
📍 New South Wales