APAC SOC Threat Hunter & Incident Response Analyst

NCC Group; Canberra; Remote; AUD 90,000 - 120,000; Full time

Job summary

NCC Group in Canberra, Australia is seeking a SOC Analyst to join our Australian SOC team. You will be the engine room, moving beyond alert monitoring to lead investigations across APAC client environments using a world-class security stack.

You will hunt threats, tune detections, and produce detailed incident reports for technical and executive stakeholders, while contributing to DLP and on-call duties.

Qualifications

• 2–4 years in a SOC or high-pressure security operations environment.
• Hands-on proficiency in Splunk, Sentinel, CrowdStrike, and Microsoft Defender.
• Strong understanding of TCP/IP, Windows/Linux internals, Cloud Security and common attack vectors.
• Certifications listed (SC-200, Splunk Core Certified Power User, CompTIA CySA+, SANS GCIH) or equivalent.

Responsibilities

• Triage and investigate complex security alerts using Splunk, Microsoft Sentinel and SentinelOne.
• Execute rapid containment and remediation with CrowdStrike and Defender on endpoints.
• Tune detections with KQL/SPL to improve proactive defence.
• Threat hunt following MITRE ATT&CK framework and report findings.
• Produce detailed incident reports for technical and executive stakeholders.
• Understand data-loss prevention in security operations.
• Join paid on-call roster every 3 weeks.

Skills

SOC Experience

Security Operations

Threat Hunting

Communication

Education

SC-200

Splunk Core Certified Power User

CompTIA CySA+

SANS GCIH

Tools

Splunk

Sentinel

CrowdStrike

Microsoft Defender

SentinelOne

Job description

NCC Group in Canberra, Australia is seeking a SOC Analyst to join our Australian SOC team. You will be the engine room, moving beyond alert monitoring to lead investigations across APAC client environments using a world-class security stack.

You will hunt threats, tune detections, and produce detailed incident reports for technical and executive stakeholders, while contributing to DLP and on-call duties.