24x7 SOC L2 Analyst – Threat Detection & Response

Zone IT Solutions Pty Ltd; Sydney; On-site; AUD 90,000 - 140,000; Full time

Job summary

Zone IT Solutions Pty Ltd in Sydney is seeking an experienced SOC Analyst L2 to support a 24x7 Security Operations Centre engagement. The role focuses on security monitoring, incident investigation, threat detection and response across IT and OT environments.

You will work with IT, OT, infrastructure and cybersecurity teams, develop detection rules in Microsoft Sentinel, perform triage and incident containment, and help improve SOC processes and playbooks.

Qualifications

• Experienced SOC Analyst L2 resources.
• Support a 24x7 Security Operations Centre (SOC) engagement.
• Focus on security monitoring, incident investigation, threat detection and response.

Responsibilities

• Monitor security events and alerts across a 24x7 SOC environment.
• Perform L2 incident triage, investigation, containment, and response.
• Analyse security logs and identify suspicious activities, threats, and attack patterns.
• Develop and tune detection rules and use cases within Microsoft Sentinel.
• Investigate incidents across endpoints, networks, servers, and other security platforms.
• Perform threat hunting and support vulnerability and security investigations.
• Escalate complex or high-severity incidents to L3/security engineering teams.
• Prepare incident reports and maintain accurate investigation documentation.
• Work closely with IT, OT, infrastructure, and cybersecurity teams during incident response.
• Support continuous improvement of SOC processes, playbooks, and detection capabilities.

Skills

SOC Analyst L2

Threat detection

Incident response

Security monitoring

Tools

Microsoft Sentinel

Job description

Zone IT Solutions Pty Ltd in Sydney is seeking an experienced SOC Analyst L2 to support a 24x7 Security Operations Centre engagement. The role focuses on security monitoring, incident investigation, threat detection and response across IT and OT environments.

You will work with IT, OT, infrastructure and cybersecurity teams, develop detection rules in Microsoft Sentinel, perform triage and incident containment, and help improve SOC processes and playbooks.