Cloud Security Incident Investigator — SOC & IR

The Onset Group; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

The Onset Group is seeking a Security Operations Analyst in Sydney to join a specialist team handling incident investigations across cloud platforms and SaaS. You will own investigations from alert to closure, using logs to establish what happened and determine the next steps.

Experience in Azure, AWS or GCP and proficiency with SIEM logging are essential. The role offers training and room to grow within the security function, with a four-day week pattern including a weekend day.

Qualifications

• Experience investigating incidents in a SOC or IR team.
• Experience with cloud platforms (Azure/AWS/GCP).
• Proficiency analyzing logs in a SIEM and deriving actions.

Responsibilities

• Own investigations from initial alert to closure using logs to establish what happened.
• Assess impact and determine what needs to happen next.
• Collaborate with other security teams to improve detections based on findings.

Skills

Incident investigations

SIEM analysis

Cloud platforms

Azure

AWS

GCP

Job description

The Onset Group is seeking a Security Operations Analyst in Sydney to join a specialist team handling incident investigations across cloud platforms and SaaS. You will own investigations from alert to closure, using logs to establish what happened and determine the next steps.

Experience in Azure, AWS or GCP and proficiency with SIEM logging are essential. The role offers training and room to grow within the security function, with a four-day week pattern including a weekend day.