Remote SOC Analyst — 24/7 Incident Response

JobAdder Operations Pty; Australia; Remote; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Flexible Work Arrangements

Structured career development program

18 weeks parental leave

Job summary

CyberCX is seeking a fully remote Security Operations Centre Analyst to provide continuous security monitoring and incident investigation across diverse enterprise environments in Australia. The role operates on a 12-hour rotating roster aligned to Australian Western Standard Time, with a focus on both fully managed and hybrid SOC arrangements.

Join a nationally distributed security operations team, participate in comprehensive training, and gain exposure to a broad range of security

Qualifications

• Experience working within a SOC, MDR, MSSP, Security Operations or similar cyber security environment.
• Hands on experience triaging and investigating security alerts and incidents.
• Experience using SIEM technologies such as Microsoft Sentinel, Splunk, QRadar or similar platforms.
• Experience using EDR/XDR technologies such as Microsoft Defender for Endpoint, CrowdStrike, Cortex XDR, SentinelOne or similar.
• Good understanding of identity related security events, including suspicious sign‑ins, MFA activity and account compromise.
• Experience investigating phishing and email based security events.
• Good foundational understanding of networking concepts including IP addresses, ports, protocols, DNS, VPN and firewall or proxy activity.
• Ability to analyse information across multiple data sources and form a clear investigation outcome.
• Strong written communication and incident documentation skills.
• Ability to work effectively across multiple customer environments and adapt to different operational processes.
• Good judgement around incident severity, escalation and handover.
• Comfortable working within a 24/7 rotating roster covering both day and night shifts.
• Ability to work independently as well as collaboratively within a distributed team.

Responsibilities

• Monitor, triage and investigate security alerts across multiple customer environments.
• Analyse security events using SIEM, EDR/XDR and other security monitoring technologies.
• Investigate suspicious activity across endpoint, identity, email and network telemetry.
• Determine whether activity represents a genuine security incident, benign behaviour or a false positive.
• Correlate information across multiple log sources to build an understanding of security events.
• Investigate common threats including phishing, account compromise, suspicious authentication activity and endpoint-based threats.
• Escalate incidents in line with customer-specific processes, playbooks and severity criteria.
• Maintain clear and accurate investigation notes, case updates and incident documentation.
• Provide detailed shift handovers to ensure continuity of active investigations.
• Work across different customer environments, technologies and processes while maintaining investigation quality.
• Collaborate with other SOC teams and security specialists across the broader business.
• Continue developing your technical capability through exposure to a broad range of security environments and threat scenarios.

Skills

SOC experience

Incident triage

Security monitoring

Strong communication

Independent working

Tools

Microsoft Sentinel

Splunk

QRadar

Defender for Endpoint

CrowdStrike

Cortex XDR

SentinelOne

Job description

CyberCX is seeking a fully remote Security Operations Centre Analyst to provide continuous security monitoring and incident investigation across diverse enterprise environments in Australia. The role operates on a 12-hour rotating roster aligned to Australian Western Standard Time, with a focus on both fully managed and hybrid SOC arrangements.

Join a nationally distributed security operations team, participate in comprehensive training, and gain exposure to a broad range of security