Permanent, full time | Hybrid, with client sites as required | Business hours plus an on-call roster
ABOUT THE ROLE
Be the onshore technical lead and Level 2 escalation point for a managed SOC. You will own complex investigations and incident response, build detections and SOAR automation, and raise the bar for the team.
WHAT YOU'LL DO
Own complex and high-severity incidents as the L2 escalation point
Lead incident response from containment to lessons learned
Run hypothesis-driven threat hunts using KQL, CQL and MITRE ATT&CK;
Build and tune detections across Sentinel, Defender XDR and CrowdStrike
Design SOAR automation with Logic Apps and Falcon Fusion
Set SOC standards and runbooks, and coach analysts
WHAT YOU BRING
5+ years in cyber, 3+ years in a SOC and 2+ years at Level 2 or above
Deep Microsoft Sentinel and Defender XDR experience
Deep CrowdStrike Falcon experience: Insight, RTR, Next-Gen SIEM and Fusion
Advanced KQL and CQL
Experience leading real-world IR: ransomware, BEC and credential compromise
MSSP or multi-client SOC experience (preferred)
SC-200 plus a current CrowdStrike Falcon certification
NICE TO HAVE
GIAC, BTL1/2, CySA+, OSCP or CISSP
Forensics and malware analysis
Splunk, Elastic, QRadar or Cortex XSOAR
PowerShell or Python
ELIGIBILITY
Australian citizens, Permanent Residents and holders of any Australian visa with full working rights are welcome to apply.
SOCAnalyst #CyberSecurity #MicrosoftSentinel #CrowdStrike #MelbourneJobs #Hiring #MeritasTalent
Additional information
Senior SOC Analyst (Level 2)
Melbourne
Australian citizens, Permanent Residents and Australian visa holders
J-18808-Ljbffr