Senior SOC Analyst

Talent; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

Talent in Canberra is seeking an experienced Senior SOC Analyst to lead investigations and mentor Tier 2/3 analysts across managed customer environments. The role is hands-on and requires driving incident coordination, threat assessment and clear customer recommendations from shift to shift.

Ideal candidates will have Tier 2/3 experience, strong SIEM/EDR/XDR skills and the ability to guide others without formal management.

Qualifications

• Proven SOC experience at Tier 2/3 or equivalent in a managed security environment.
• Strong investigation skills using SIEM, EDR or XDR platforms.
• Experience independently managing complex incidents and escalation decisions.
• Ability to guide and mentor others without formal line-management responsibilities.
• Clear communication skills to explain technical findings to customers.
• Willingness to work rotating days, nights, weekends and public holidays.

Responsibilities

• Investigate and triage complex alerts across endpoint, identity, cloud, network and application environments.
• Act as the technical escalation point for high-severity incidents, assessing scope, impact and response priorities.
• Coordinate incident response within agreed customer procedures and escalation pathways.
• Mentor analysts and review investigations, incident reports, and recommended actions.
• Maintain accurate case records, customer updates and structured shift handovers.
• Improve detection rules, playbooks, automation and investigation workflows alongside specialist cyber teams.

Skills

SOC experience

Tier 2/3 IR

SIEM/EDR/XDR

Mentoring capability

Communication skills

Shift work availability

Threat coordination

Tools

Microsoft Sentinel

KQL

CrowdStrike Falcon

SOAR

ServiceNow SecOps

Job description

24/7 rotating roster-typically two days, two nights, four days off

Current or reinstatable NV1 clearance required

We're seeking an experienced Senior SOC Analyst to investigate complex security incidents, provide technical leadership during shifts and mentor developing analysts across managed customer environments.

This is a hands-on opportunity for a strong Tier 2/3 analyst who can confidently assess threats, coordinate incident activity and communicate clear recommendations to customers.

Senior SOC Analyst | Tier 2/3

• Location: Canberra, ACT
• ASAP start
• 24/7 rotating roster-typically two days, two nights, four days off
• Current or reinstatable NV1 clearance required

We're seeking an experienced Senior SOC Analyst to investigate complex security incidents, provide technical leadership during shifts and mentor developing analysts across managed customer environments.

This is a hands-on opportunity for a strong Tier 2/3 analyst who can confidently assess threats, coordinate incident activity and communicate clear recommendations to customers.

What you'll do

• Investigate and triage complex alerts across endpoint, identity, cloud, network and application environments.
• Act as the technical escalation point for high-severity incidents, assessing scope, impact and response priorities.
• Coordinate incident response within agreed customer procedures and escalation pathways.
• Mentor analysts and review investigations, incident reports, and recommended actions.
• Maintain accurate case records, customer updates and structured shift handovers.
• Improve detection rules, playbooks, automation and investigation workflows alongside specialist cyber teams.

What you'll bring

• Proven SOC, managed security services or incident response experience at Tier 2/3 or an equivalent senior level.
• Strong investigation skills using SIEM, EDR or XDR platforms.
• Experience independently managing complex incidents and making sound escalation decisions.
• Ability to guide and mentor others without formal line-management responsibility.
• Clear communication skills and confidence explaining technical findings to customers.
• Availability to work rotating days, nights, weekends and public holidays.

Experience with Microsoft Sentinel, KQL, CrowdStrike Falcon, SOAR or ServiceNow SecOps will be highly regarded, along with familiarity with MITRE ATT&CK and relevant industry certifications.

Citizenship and clearance

Australian citizenship and a current or reinstatable AGSVA NV1 security clearance are required. Applicants must be based in Canberra or willing to relocate for the role.