Job Description
Sydney, Brisbane or Perth (hybrid working available - three days in the office)
n
Employment
n
Full-time, rotating roster supporting 24x7 SOC operations
n
About Baidam Solutions
n
Baidam Solutions is an Australian-owned cybersecurity services provider with a strong social impact mission. We partner with First Nations communities, customers, and global technology providers to deliver leading-edge security solutions while creating pathways for Indigenous participation in the ICT industry.
n
Our Security Operations Centre (SOC) is growing, and we are seeking talented Level 2 SOC Analysts who are passionate about defending organisations against cyber threats, improving detection and response processes, and contributing to a skilled and diverse cyber workforce in Australia.
n
Why Join Us
n
n
Competitive salary and clear progression pathways into senior cyber security roles.
n
Investment in ongoing training and industry-recognised certifications, including SANS, Microsoft, CrowdStrike and Splunk.
n
Hybrid working flexibility within a supportive, collaborative and multicultural team environment.
n
Hands‐on exposure to leading security technologies, including Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon Next‐Gen SIEM, SOAR and advanced threat intelligence platforms.
n
The opportunity to join a purpose‐driven organisation that delivers measurable social impact.
n
n
Key Responsibilities
n
n
Investigate, validate, triage and respond to security alerts and incidents across Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon Next‐Gen SIEM, EDR/XDR, SOAR and cloud security platforms.
n
Perform deeper technical analysis of complex incidents across endpoint, identity, cloud and network environments, and escalated matters requiring specialist or senior support.
n
Lead or support incident response activities for escalated security events, including containment, eradication, recovery and post‐incident review.
n
Conduct proactive threat hunting using telemetry from CrowdStrike Falcon, Microsoft Sentinel, Microsoft Defender XDR and other security technologies.
n
Onboard new customers, data sources and security technologies into the SOC, including validating data quality, parsing, normalisation and end‐to‐end alerting.
n
Develop, test, tune and maintain detection rules, correlation logic and analytics to improve coverage,



increase alert fidelity and reduce false positives.
n
Create and maintain KQL and other investigation queries, analytics rules, automation workflows, SOAR playbooks and investigation documentation.
n
Identify gaps in visibility, logging, telemetry and detection coverage, and recommend practical improvements.
n
Work directly with customers to investigate incidents, communicate findings and provide clear, actionable technical recommendations.
n
Produce high‐quality documentation, including incident reports, post‐incident reviews, knowledge articles, investigation procedures and SOC playbooks.
n
Support the continuous improvement of SOC processes, playbooks, response procedures, detections and operational maturity.
n
Mentor Level 1 SOC Analysts, assist with complex investigations and contribute to the ongoing development of the wider SOC team.
n
Stay current with emerging threats, vulnerabilities, attacker techniques and modern detection engineering practices.
n
Participate in an on‐call rotation to support incident escalation and operational requirements outside standard business hours.
n
n
What We're Looking For
n
Skills and Experience
n
n
Previous experience working in a SOC, security operations, cyber defence or incident response role is mandatory.
n
Hands‐on experience investigating, validating and responding to security alerts and incidents.
n
Experience performing Level 2 analysis and managing complex investigations across Windows, Microsoft 365, Azure, endpoint, identity and cloud environments.
n
Experience onboarding customers, log sources, security products or data integrations into a SIEM platform.
n
Experience developing, testing and tuning security detections, correlation rules and alert logic.
n
Strong practical knowledge of Microsoft Sentinel, Microsoft Defender XDR and CrowdStrike Falcon Next‐Gen SIEM.
n
Experience with enterprise SIEM platforms such as Microsoft Sentinel, CrowdStrike Falcon Next‐Gen SIEM, Splunk, Google SecOps or similar.
n
Experience with EDR/XDR platforms,



SOAR technologies and security automation workflows.
n
Familiarity with KQL, SPL or similar query languages; basic PowerShell or Python scripting capability is desirable.
n
Understanding of common attack techniques, identity threats, endpoint security, cloud security and the MITRE ATT&CK; framework.
n
Ability to identify security gaps and translate technical findings into practical improvements.
n
Strong written and verbal communication skills, with the ability to engage effectively with technical and non‐technical stakeholders.
n
A proactive, collaborative approach to problem‐solving and continuous improvement.
n
Ability to prioritise multiple incidents in a rapid‐paced, 24x7 managed SOC environment.
n
Experience working within a Managed Security Service Provider (MSSP) or customer‐facing managed SOC environment.
n
Demonstrated hands‐on experience with Microsoft Sentinel, Microsoft Defender XDR and CrowdStrike products.
n
Experience supporting multiple customer environments and balancing competing operational priorities.
n
n
Security Knowledge
n
n
Incident response and security operations best practice.
n
Threat intelligence and threat hunting.
n
Malware analysis fundamentals and digital forensics concepts.
n
MITRE ATT&CK; framework and Cyber Kill Chain.
n
Microsoft Azure and Microsoft 365 security.
n
n
Clearance Requirements
n
n
Australian Citizenship is required.
n
Ability to obtain and maintain an Australian Government Security Clearance.
n
n
Desirable Certifications
n
n
CrowdStrike Falcon Administrator or Falcon Hunter
n
Microsoft SC‐200
n
Microsoft AZ‐500
n
CompTIA Security+
n
GIAC GCIH or GCIA
n
Security Blue Team certifications
n
n
Salary and Benefits
n
n
Salary range of AUD $110,000-$140,000 plus superannuation, depending on experience.
n
Dedicated training budget for Microsoft, CrowdStrike and SANS certifications.
n
Exposure to enterprise government, critical infrastructure and commercial environments.
n
Career pathways into Senior SOC Analyst, Detection Engineer, Incident Response and Threat Hunting roles.
n
Indigenous mentoring, education programs and career pathways unique to Baidam Solutions.
n
Flexible hybrid work model with SOC presence in Sydney, Brisbane and Perth.
n
#J-*****-Ljbffr

📌 Security Operations Center Analyst (New South Wales)
🏢 Baidam
📍 New South Wales