Senior SOC Analyst

E2 Cyber; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

E2 Cyber in Canberra, ACT, is seeking a Senior SOC Analyst to join a high-performing cyber security operations team. This hands-on role involves investigating complex incidents, leading technical responses, and mentoring junior analysts within a fast-paced SOC.

You will operate in a 24/7 environment, coordinating incident response, using SIEM/EDR/XDR tooling, and contributing to the development of detection use cases and playbooks for ongoing protection of enterprise systems.

Qualifications

• Experience within a Security Operations Centre or similar cyber security environment.
• Proven ability to independently manage complex cyber security investigations.
• Experience mentoring or guiding junior analysts.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Responsibilities

• Investigate and analyse complex security alerts, incidents, and anomalous activity.
• Act as a senior technical escalation point for high-severity cyber security events.
• Correlate evidence across endpoint, cloud, identity, network, authentication and application data sources.
• Coordinate incident response activities and support containment and recovery efforts.
• Review and validate investigations, incident classifications, and recommended response actions.
• Provide technical guidance and mentorship to SOC analysts during shifts.
• Maintain high-quality case documentation and customer communications.
• Contribute to incident reviews, lessons learned and improvements.

Skills

SOC operations

Incident response leadership

Mentoring

SIEM

EDR

XDR

KQL

Microsoft Sentinel

Threat detection

Communication skills

Tools

CrowdStrike Falcon

SOAR platforms

ServiceNow SecOps

Kusto Query Language (KQL)

Microsoft Sentinel

Job description

Senior SOC Analyst

We are seeking an experienced Senior SOC Analyst to join our clients high-performing cyber security operations team based in Canberra, ACT. This is a hands-on operational role suited to a security professional with strong experience investigating complex cyber incidents, leading technical responses, and mentoring junior analysts within a fast-paced Security Operations Centre environment.

Working as part of a 24/7 SOC, you will play a key role in threat detection, incident investigation, escalation management, and continuous improvement activities across enterprise environments. The ideal candidate will bring strong analytical capability, excellent communication skills, and the ability to make sound decisions during high-priority security events.

This challenging and rewarding opportunity offers exposure to advanced cyber security operations, cutting-edge security technologies, and the chance to contribute to the protection of critical systems and services.

What's in it for you?

• Opportunity to work in a mature and highly capable cyber security operations environment
• Exposure to complex incident response and threat investigation activities
• Collaborative and supportive team culture
• Opportunity to mentor and develop junior analysts
• Work with industry-leading cyber security tools and technologies
• Long-term opportunity supporting mission-critical environments

What will you be doing?

• Investigate and analyse complex security alerts, incidents, and anomalous activity
• Act as a senior technical escalation point for high-severity cyber security events
• Correlate evidence across endpoint, cloud, identity, network, authentication and application data sources
• Coordinate incident response activities and support containment and recovery efforts
• Review and validate investigations, incident classifications, and recommended response actions
• Provide technical guidance and mentorship to SOC analysts during operational shifts
• Maintain high-quality case documentation, incident records, customer communications and shift handovers
• Contribute to incident reviews, lessons learned, and continuous improvement initiatives
• Support the development and enhancement of detection use cases, playbooks and response procedures
• Engage with stakeholders to communicate incident findings, risks and recommended actions

Skills and experience required to succeed in this role?

• Demonstrated experience within a Security Operations Centre, Managed Security Service, Incident Response Team, or similar cyber security environment
• Experience operating at a Senior Analyst, Tier 2, Tier 3, or equivalent escalation level
• Strong hands-on experience with SIEM, EDR and XDR technologies
• Proven ability to independently manage complex cyber security investigations and incidents
• Experience providing technical leadership, mentoring or shift coordination
• Excellent analytical, problem-solving and investigative skills
• Strong written and verbal communication skills
• Hands-on experience with Microsoft Sentinel and Kusto Query Language (KQL) highly regarded
• Experience with CrowdStrike Falcon, SOAR platforms, or ServiceNow SecOps desirable
• Familiarity with MITRE ATT&CK and modern cyber threat frameworks advantageous
• Ability to work a rotating 24/7 roster including days, nights, weekends and public holidays

Clearance required?

• Australian Citizenship is mandatory
• Current NV1 Security Clearance required

We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.

#SCR-matt-kiss