Senior Soc Analyst L3

Everi Pty; Australia; On-site; AUD 120,000 - 180,000; Full time

Job summary

Deloitte is seeking a senior L3 Security Analyst to join the 24x7 SOC in Australia. You will act as an escalation point for L1/L2 analysts, lead a capability area for high-profile clients, and drive incident response using the latest tools and methodologies. The role focuses on keeping clients safe and delivering strong security services.

You will report to the SOC Team Lead and contribute to decision making, process improvements, and coaching across shifts in a fast-paced environment.

Qualifications

• Experience as escalation point for timely detection and alerting of attacks and intrusions.
• Ability to analyze security events from multiple sources and distinguish threats from benign activity.
• Experience building and tuning detections for new threats.

Responsibilities

• Act as escalation point for L1/L2 SOC Analysts during incidents.
• Lead a capability area and shape processes for high-profile clients.
• Provide guidance and upskilling to junior SOC members, including night shift analysts.

Skills

Incident escalation

Threat analysis

Security incident response

Telemetry correlation

Threat hunting

Leadership

Mentoring

Tools

SIEM

NIPS/IPS

EDR

Job description

Job Description

• Tackle big issues like cyber, trust, resilience and digital transformation
• Be part of market-leading projects with global scale and complexity
• Mentoring, coaching and leadership programs to help you make an impact that matters

What will your typical day look like?

Be part of the SOC leadership team, help make decisions that define our strategy, drive change and provide better services for our clients. Help us do something that really matters - keep Australian people and Australian companies safe - while enjoying work and the fast paced environment that rewards you for your efforts, encourages your ideas and recognises that work life balance is important.

Reporting to the Security Operations Centre (SOC) Team Lead, the L3 Security Analyst fills a leadership role in the Deloitte 24x7 SOC. Our mandate is to provide fully managed detection and response capability to a suite of international clients. The role will be part of the L3 escalation roster, providing first class incident response capability to identified threats and alerts using the latest tools, processes, and techniques.

This senior role fills two critical functions in the SOC

1. 1. Incident Response - Acting as an escalation point for L1 and L2 SOC Analysts and a technical point of contact for our clients during Incident Responses both within and outside business hours. Using defensive measures and telemetry collected from a variety of sources to provide guidance to junior SOC members to identify, analyse, and report events that occur or might occur within client networks in order to protect information, information systems, and networks from threats.
2. 2. Lead a Capability area - Work with a dedicated subset of analysts to shape process and improve delivery outcomes for a select group of high profile clients. Enjoy flexibility to drive the agenda and move the needle on day to day operations.

Enough about us, let's talk about you

You may have all or some of the following skills/experiences:

• Experience as an escalation point to ensure timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
• Analysis of security events from multiple sources including but not limited to events from the Security Information and Event Management tool, network intrusion systems and Host based Intrusion Prevention tools
• Analyse identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Determine tactics, techniques, and procedures (TTPs) for intrusion sets.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Collaborate with other L3s to ensure Threat Hunting, Threat Intel, Detections, Tuning and other L3 tasks are completed as required
• Provide knowledge and expertise to L1 and L2 Analysts including night shift Analysts to upskill where possible
• Creation and tuning of detections in response to new or observed threats within customer environments
• Review and document and improving processes to contribute to the overall security of the environment
• Must be an Australian citizen and must be able to attain and maintain an Australian Federal Government security clearance at the NV1 level or higher.

About the Employer

At Deloitte, we focus our energy on interesting and impactful work. We're always learning, innovating and setting the standard; making a positive difference to our clients and our society. We putcoaching at the heart of what we do, helping our people grow their careers in any direction - whether it be up, moving into something new, or even moving across the world.

We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone's perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong.

We value in-person connection with our clients and our colleagues. We offer several ways for you to work flexibly so that you can serve your clients, stay connected with your team, and manage your personal priorities.