Remote SOC Analyst — Threat Hunting & Incident Response

HackLabs; Australia; Remote; AUD 90,000 - 130,000; Full time

Benefits offered by this job

100% Remote Flexibility

Training & Certifications

Collaborative Culture

Job summary

HackLabs is seeking a proactive SOC Analyst to join its remote-based managed security services team in Australia. You will monitor client environments, investigate alerts, and perform threat hunting using leading SIEM/EDR tools.

The role focuses on rapid incident analysis and effective remediation recommendations for diverse clients. You will work from anywhere in Australia, leveraging MITRE ATT&CK techniques and contributing to continuous improvement of detection rules and runbooks.

Qualifications

• Experience in a SOC, Incident Response, or Cyber Security Operations role.
• Experience analysing log data with platforms like Rapid7, SentinelOne, Splunk, Crowdstrike.
• Strong understanding of TCP/IP protocols, DNS, firewalls, Active Directory, and operating system security (Windows/Linux).
• Familiarity with cybersecurity frameworks.
• Clear written and verbal communication skills for client reporting and internal collaboration.

Responsibilities

• Monitor client environments 24/7 via SIEM, EDR, and NDR tools to detect, classify, and prioritise potential security incidents.
• Conduct initial investigations into security alerts, perform threat analysis, and escalate verified incidents following defined SLAs.
• Proactively hunt for undetected malicious activities across endpoint, network, and cloud environments using MITRE ATT&CK techniques.
• Draft detailed incident notification reports and provide remediation recommendations to client teams.
• Fine-tune SIEM detection rules, build automated playbooks (SOAR), and update runbooks to reduce false positives.

Skills

SOC Experience

SIEM/EDR

Networking Fundamentals

Incident Frameworks

Communication

Tools

Rapid7

SentinelOne

Splunk

CrowdStrike

Job description

HackLabs is seeking a proactive SOC Analyst to join its remote-based managed security services team in Australia. You will monitor client environments, investigate alerts, and perform threat hunting using leading SIEM/EDR tools.

The role focuses on rapid incident analysis and effective remediation recommendations for diverse clients. You will work from anywhere in Australia, leveraging MITRE ATT&CK techniques and contributing to continuous improvement of detection rules and runbooks.