Senior SOC Analyst (Level 2)

SSM Technologies; Melbourne; Hybride; AUD 140 000 - 170 000; Plein temps

Résumé du poste

SSM Technologies is seeking a Senior SOC Analyst (Level 2) to be the onshore technical lead for a managed SOC in Melbourne. You will own complex investigations and incident response, build detections and SOAR automation, and raise the bar for the team.

You will lead high-severity incidents, run containment-to-lessons learned cycles, and drive proactive threat hunts using KQL, CQL, and MITRE ATT&CK. This role requires strong experience with Microsoft Sentinel, Defender XDR and CrowdStrike Falcon.

Qualifications

• 5+ years in cyber security
• 3+ years in a SOC
• 2+ years at Level 2 or above
• Deep Microsoft Sentinel and Defender XDR experience
• Deep CrowdStrike Falcon experience: Insight, RTR, Next-Gen SIEM and Fusion
• Advanced KQL and CQL
• Experience leading real-world IR: ransomware, BEC and credential compromise
• MSSP or multi-client SOC experience (preferred)

Responsabilités

• Own complex and high-severity incidents as the L2 escalation point
• Lead incident response from containment to lessons learned
• Run hypothesis-driven threat hunts using KQL, CQL and MITRE ATT&CK
• Build and tune detections across Sentinel, Defender XDR and CrowdStrike
• Design SOAR automation with Logic Apps and Falcon Fusion
• Set SOC standards and runbooks, and coach analysts

Description du poste

Permanent, full time | Hybrid, with client sites as required | Business hours plus an on-call roster

ABOUT THE ROLE

Be the onshore technical lead and Level 2 escalation point for a managed SOC. You will own complex investigations and incident response, build detections and SOAR automation, and raise the bar for the team.

WHAT YOU'LL DO

• Own complex and high-severity incidents as the L2 escalation point
• Lead incident response from containment to lessons learned
• Run hypothesis-driven threat hunts using KQL, CQL and MITRE ATT&CK
• Build and tune detections across Sentinel, Defender XDR and CrowdStrike
• Design SOAR automation with Logic Apps and Falcon Fusion
• Set SOC standards and runbooks, and coach analysts

WHAT YOU BRING

• 5+ years in cyber, 3+ years in a SOC and 2+ years at Level 2 or above
• Deep Microsoft Sentinel and Defender XDR experience
• Deep CrowdStrike Falcon experience: Insight, RTR, Next-Gen SIEM and Fusion
• Advanced KQL and CQL
• Experience leading real-world IR: ransomware, BEC and credential compromise
• MSSP or multi-client SOC experience (preferred)
• SC-200 plus a current CrowdStrike Falcon certification

NICE TO HAVE

• GIAC, BTL1/2, CySA+, OSCP or CISSP
• Forensics and malware analysis
• Splunk, Elastic, QRadar or Cortex XSOAR
• PowerShell or Python

ELIGIBILITY

• Australian citizens, Permanent Residents and holders of any Australian visa with full working rights are welcome to apply.

#SOCAnalyst #CyberSecurity #MicrosoftSentinel #CrowdStrike #MelbourneJobs #Hiring #MeritasTalent

Additional information

• Senior SOC Analyst (Level 2)
• Melbourne
• Australian citizens, Permanent Residents and Australian visa holders