Cloud Security Incident Analyst (SOC) – Azure, AWS, GCP

Bank of America; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Bank of America in Sydney, Australia is seeking a Cloud SOC Incident Analyst with 2–5 years in a Cloud SOC environment. The role covers Azure, AWS, GCP and SaaS apps, focusing on identifying, analysing, mitigating and responding to threats and alerts.

The position is full-time (38 hours/week) with standard hours and a 4-day week (Wed–Sat) to align with support needs. Applicants should have cloud experience and strong analytical skills.

Qualifications

• Experience responding to cyber security incidents in at least one cloud (Azure/AWS/GCP).
• Analytical mindset to triage and close incidents unsupervised.
• Ability to interpret and present logging data from SIEM tools.

Responsibilities

• Investigate and respond to incidents and alerts using cloud security knowledge.
• Identify unfamiliar data during incidents and assess relevance.
• Use Splunk and Log Analytics to view logs for cloud apps.
• Improve alerting by tuning detections and creating new ones.
• Communicate clearly with technical and non-technical audiences.
• Collaborate with a global team across regions.

Skills

Cloud security

Incident response

SIEM analysis

Cloud platforms

Education

Bachelor’s degree in Computer Science/Engineering/InfoSec

Tools

Splunk

Elasticsearch

Job description

Bank of America in Sydney, Australia is seeking a Cloud SOC Incident Analyst with 2–5 years in a Cloud SOC environment. The role covers Azure, AWS, GCP and SaaS apps, focusing on identifying, analysing, mitigating and responding to threats and alerts.

The position is full-time (38 hours/week) with standard hours and a 4-day week (Wed–Sat) to align with support needs. Applicants should have cloud experience and strong analytical skills.