Security Analyst (Managed Services: Security Operations Centre)

Everi Pty; Canberra; On-site; AUD 80,000 - 110,000; Full time

Job summary

LAB3 in Canberra, Australia seeks a Level 1 SOC analyst to join the 24/7 Security Operations Centre. The role covers monitoring, investigation, and incident response across Microsoft/Sentinel environments, with shift work and occasional remote/hybrid duties.

Ideal candidates have SOC experience, Azure knowledge, and a proactive approach to automation, governance, and client reporting. NV1 clearance or Australian citizenship is preferred.

Qualifications

• Experience in a SOC, ideally Microsoft/Azure environment.
• Ability to work on rotating shifts.
• Proactive mindset for secure automation and continuous improvement.

Responsibilities

• Security alert monitoring and 24/7 response ownership on shift.
• Investigation, escalation, and incident handling with log evidence.
• Maintain governance, playbooks, and incident reporting.
• Collaborate with clients and teams to ensure security and availability.
• Tune alerts, identify automation opportunities, and document processes.

Skills

SOC analysis

Microsoft Sentinel

Azure Sentinel

Azure Log Analytics

Azure Security Centre

KQL / SQL

Threat intelligence

Incident response

Tools

Microsoft Sentinel

Azure Log Analytics

Azure Security Centre

Splunk

Kibana

SQL

Job description

Job Description

We have a great opportunity for a L1 SOC analyst on our managed services team ideally with NV1 clearance (or Australian citizenship so we can help you obtain one) to join LAB3's 24/7 Security Operations Centre (SOC). You will be working on shifts and once a fortnight from office to support, monitor, and maintain high security standards and manage incident responses & controls and for our clients.

Play a fundamental role in the analysis, investigation, logging, monitoring and escalation of cyber security events produced by the SIEM 24/7.

Promote and support the security process, outcomes, and value proposition to internal and external clients. Manage the governance processes to promote effective oversight and solution quality within security business areas.

Cyber Security event handling such as:

• Security alert monitoring and response on your shift, ensuring 24/7 coverage
• Investigation, escalation, and ownership of incidents
• Track tactical issues in execution of SOC responsibilities and process.
• Ticket logging: ensure the investigation process and chain of custody for evidence handling and gathering is followed.
• Ensuring incidents are addressed in a timely manner using available reporting and metrics.
• Monitoring Level 1 Analyst events
• Work closely with our clients, support the reporting & communication regarding incidents and their follow up.
• Maintaining SOC documentation and analytic playbooks
• Demonstrate an ability to perform incident investigation and triages confidently.
• Identifying opportunities for tuning noisy alerts and automation
• Undertake client governance and reporting tasks
• Partner with teams across the organization, to ensure the security, availability, and site reliability of our infrastructure.
• Analyse, troubleshoot and respond to potential threats where necessary using Microsoft Sentinel, Azure Log Analytics and Azure Security Centre., Be part of a Managed Services team that truly leverages modern technologies to solve real problems and provides top level of customer satisfaction
• Work with a Microsoft Partner of the Year award winner with multiple specialisations, consistently punching above our weight on the global technology stage
• Be supported by experienced peers and leaders, with clear career pathways and ongoing learning, including Microsoft and HashiCorp certifications, all in a community that values technical expertise, and encourages innovation and practical experimentation with automation and AI
• Enjoy a supportive workplace that values inclusion, flexibility, diversity, and differences. We actively encourage and embrace all cultural backgrounds, genders, abilities, and circumstances
• Take advantage of largely working from home in our remote/hybrid workplace and enjoy the flexibility to balance your life
• Thrive in a community with strong values #BeTrue #TeamUp #StandOut #ThinkAhead #FearLessAchieveMore

About the Employer

LAB3 is one of the largest Azure engineering practices in the Australasia region with a focus on Cloud & DevOps, Data, IoT & AI, Modern Workplace, Security, and Network services.

About the Candidate

• Experience in a SOC, ideally in a Microsoft/ Azure environment
• Ability to work on a rotating shift
• Mindset: Client-centric, collaborative, and passionate about secure automation and continuous improvement
• Communication skills: Ability to communicate effectively
• Technical Skills & knowledge: Cloud Security, Cybersecurity operations , SOC analytic skills, familiarity with cyber security policies and compliance standards, knowledge of cyber security threats and tactics, threat intelligence within Azure, Investigation theory, SOC Wiki (maintenance and documentation creation), Azure Security Centre, Detection Rules, Analytical investigation & Coding skills (Query language like KQL or SQL), SIEM - Azure Sentinel (preferred) or Splunk, Kibana or equivalent SIEM product, MITRE ATT&CK framework techniques and tactics. OSINT, EDR, MS Defender for Cloud