Looking for your next step in cyber security? We're seeking a SOC Analyst with experience investigating security alerts and responding to incidents to join a team supporting customer environments.
You’ll work alongside other cyber specialists, put your investigation skills to use and share your knowledge with developing analysts.
The roster: 24/7 rotating shifts, typically two days, two nights, then four days off, including weekends and public holidays.
What you’ll do
Review security alerts, investigate suspicious activity and help coordinate incident response.
Use SIEM and endpoint security tools to understand threats and recommend actions.
Keep clear investigation notes, customer updates and shift handovers.
Help other analysts work through investigations.
Contribute ideas to improve detection rules, playbooks and everyday processes.
What we’re looking for
Previous experience in a SOC, security monitoring or incident response role.
Confidence investigating alerts using SIEM, EDR or XDR tools.
Good judgement about when to take action and when to elevate.
Clear communication and a cooperative approach.
Willingness to work the rotating roster.
Experience with Microsoft Sentinel, KQL, CrowdStrike, SOAR or ServiceNow SecOps would be useful. You don't need experience with every platform listed.
Australian citizenship and a current or reinstatable AGSVA NV1 clearance are required. You'll need to be based in Canberra or willing to relocate.