Job Description

Position Overview n

SOC 2 Contract through 2026 Supporting APAC Time zones.

Responsibilities n

n
Investigate security incidents and determine root causes.
n
Review incidents escalated by Tier 1 analysts, who collect data and review alerts.
n
Utilize threat intelligence—including indicators of compromise (IoCs), tactics, techniques, and procedures (TTPs), and company host, network data sets—to assess alerts, threats, and potential incidents in depth.
n
Develop and refine SIEM use cases, reduce/tune false alerts, and lead investigations until issues are resolved.
n
Monitor systems and events across Windows, macOS, and Linux operating systems.
n

Qualifications nn
Proactive, problem‑solver, and curious.
n
5+ years recent experience as a Tier 2 or Tier 3 analyst at a large organization; preference for government and critical‑infrastructure companies.
n
Solid, demonstrated SIEM and data correlation experience.
n
Experience designing current SOC use cases and working with vendors to implement them.
n
Experience designing and implementing runbooks to mitigate security incidents.
n
Experience designing incident‑response plans,



including alert definitions, runbooks, and escalation procedures.
n
Extensive experience reviewing and managing alerts in Microsoft Defender, Splunk, and/or CrowdStrike.
n
Proficient in conducting hunts across disparate data sets—host, vulnerability, threat, network, and Active Directory data—to identify threats.
n
Leadership in timely security‑operations response efforts in collaboration with stakeholders.
n
Documentation of incident‑response communications for technical and management audiences.
n
Ability to set up alert rules and manage alerts effectively.
n
Demonstrated ability to create runbooks and conduct investigations with key application, IT infrastructure, and other stakeholders.
n
Experience designing custom SOC SIEM use cases in Defender, Splunk, and CrowdStrike.
n
Experience conducting forensic investigations.
n
Analytical, qualitative, and quantitative abilities.
n
Adaptive to dynamic environment.
n
Solid security‑operations documentation abilities.
n

n
J-18808-Ljbffr

📌 Soc 2 Analyst Sydney (Australia)
🏢 Plurilock
📍 Australia