Senior SOC Analyst

Talent Corp; Canberra; On-site; AUD 90,000 - 120,000; Full time

Job summary

Talent Corp in Canberra is seeking a SOC Analyst to investigate security alerts and respond to incidents across customer environments. You will work with other cyber specialists, applying your investigation skills and sharing knowledge with developing analysts.

The role features a 24/7 rotating roster (two days, two nights, four days off) including weekends and public holidays. You will use Microsoft Sentinel, KQL, CrowdStrike, SOAR or ServiceNow SecOps to understand threats, coordinate

Qualifications

• Experience in a SOC, security monitoring or incident response role.
• Ability to investigate alerts using SIEM/EDR/XDR.
• Good judgement on action vs escalation.
• Clear, collaborative communication.
• Willingness to work a rotating roster and shifts.

Responsibilities

• Review security alerts and investigate incidents.
• Coordinate incident response with customers.
• Use SIEM and endpoint tools to understand threats and actions.
• Maintain investigation notes and handovers.
• Mentor developing analysts and share knowledge.
• Contribute ideas to improve detection rules and playbooks.

Skills

SOC experience

Security monitoring

Incident response

SIEM

EDR/XDR

Communication

Team collaboration

Rotating roster

Microsoft Sentinel

KQL

CrowdStrike

SOAR

ServiceNow SecOps

Tools

Microsoft Sentinel

KQL

CrowdStrike

SOAR

ServiceNow SecOps

Job description

Looking for your next step in cyber security? We're seeking a SOC Analyst with experience investigating security alerts and responding to incidents to join a team supporting customer environments.

You’ll work alongside other cyber specialists, put your investigation skills to use and share your knowledge with developing analysts.

The roster: 24/7 rotating shifts, typically two days, two nights, then four days off, including weekends and public holidays.

What you’ll do

Review security alerts, investigate suspicious activity and help coordinate incident response.

Use SIEM and endpoint security tools to understand threats and recommend actions.

Keep clear investigation notes, customer updates and shift handovers.

Help other analysts work through investigations.

Contribute ideas to improve detection rules, playbooks and everyday processes.

What we’re looking for

Previous experience in a SOC, security monitoring or incident response role.

Confidence investigating alerts using SIEM, EDR or XDR tools.

Good judgement about when to take action and when to elevate.

Clear communication and a collaborative approach.

Willingness to work the rotating roster.

Experience with Microsoft Sentinel, KQL, CrowdStrike, SOAR or ServiceNow SecOps would be useful. You don't need experience with every platform listed.

Australian citizenship and a current or reinstatable AGSVA NV1 clearance are required. You'll need to be based in Canberra or willing to relocate.