Security Operations Center Analyst

HackLabs; Australia; Remote; AUD 90,000 - 130,000; Full time

Benefits offered by this job

100% Remote Flexibility

Training & Certifications

Collaborative Culture

Job summary

HackLabs is seeking a proactive SOC Analyst to join its remote-based managed security services team in Australia. You will monitor client environments, investigate alerts, and perform threat hunting using leading SIEM/EDR tools.

The role focuses on rapid incident analysis and effective remediation recommendations for diverse clients. You will work from anywhere in Australia, leveraging MITRE ATT&CK techniques and contributing to continuous improvement of detection rules and runbooks.

Qualifications

• Experience in a SOC, Incident Response, or Cyber Security Operations role.
• Experience analysing log data with platforms like Rapid7, SentinelOne, Splunk, Crowdstrike.
• Strong understanding of TCP/IP protocols, DNS, firewalls, Active Directory, and operating system security (Windows/Linux).
• Familiarity with cybersecurity frameworks.
• Clear written and verbal communication skills for client reporting and internal collaboration.

Responsibilities

• Monitor client environments 24/7 via SIEM, EDR, and NDR tools to detect, classify, and prioritise potential security incidents.
• Conduct initial investigations into security alerts, perform threat analysis, and escalate verified incidents following defined SLAs.
• Proactively hunt for undetected malicious activities across endpoint, network, and cloud environments using MITRE ATT&CK techniques.
• Draft detailed incident notification reports and provide remediation recommendations to client teams.
• Fine-tune SIEM detection rules, build automated playbooks (SOAR), and update runbooks to reduce false positives.

Skills

SOC Experience

SIEM/EDR

Networking Fundamentals

Incident Frameworks

Communication

Tools

Rapid7

SentinelOne

Splunk

CrowdStrike

Job description

Security Operations Centre (SOC) Analyst – Cyber MSSP

Location:

Anywhere in Australia (full-time remote based role)

The Company:

HackLabs, a Leading Australian Cyber Security MSSP / Consultancy

About HackLabs

At HackLabs, we are dedicated to helping organisations secure their critical digital assets against emerging cyber threats. As a premier cyber security consultancy and managed security services provider in Australia, we pride ourselves on technical excellence, proactive threat hunting, and delivering robust security solutions to our clients.

Role Overview

We are looking for a proactive and detail-oriented SOC Analyst to join our growing Managed Security Services team. Working remotely from anywhere in Australia, you will be on the front lines of monitoring, detecting, analyzing, and responding to cyber threats across our diverse client base.

As a key team member, you will leverage modern SIEM platforms, EDR technologies, and threat intelligence feeds to investigate security alerts, perform root cause analysis, and assist in incident response operations.

Key Responsibilities

• Security Monitoring & Triage: Monitor client environments 24/7 via SIEM, EDR, and NDR tools to detect, classify, and prioritise potential security incidents.
• Incident Analysis & Escalation: Conduct initial investigations into security alerts, perform threat analysis, and escalate verified incidents following defined SLAs.
• Threat Hunting & Intelligence: Proactively hunt for undetected malicious activities across endpoint, network, and cloud environments using MITRE ATT&CK techniques.
• Client Engagement & Reporting: Draft detailed incident notification reports and provide practical remediation recommendations to client technical teams.
• SOC Continuous Improvement: Fine-tune SIEM detection rules, build automated playbooks (SOAR), and update operational runbooks to reduce false positives.

Qualifications & Skills

• Experience: Experience in a SOC, Incident Response, or Cyber Security Operations role.
• SIEM & EDR Expertise: Experience analysing log data using platforms like Rapid7, SentinelOne, Splunk, Crowdstrike.
• Network & Systems Fundamentals: Strong understanding of TCP/IP protocols, DNS, firewalls, Active Directory, and operating system security (Windows/Linux).
• Incident Frameworks: Familiarity with cybersecurity frameworks
• Communication: Clear written and verbal communication skills for client reporting and internal cross-team collaboration.

What We Offer

• 100% Remote Flexibility: Work from any state or territory in Australia.
• Professional Development: Dedicated budget and support for training, certifications, and attending cyber security conferences.
• Collaborative Culture: Work directly alongside senior penetration testers, threat hunters, and security engineers.