Senior SOC Analyst – MSP, Hybrid & Certifications

Systima; Melbourne; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Systima in Melbourne is seeking an experienced SOC Analyst to join our NOC and SOC team, focusing on monitored security events for our managed clients. This role requires hands-on incident response and direct client communication during active incidents.

You will triage alerts, lead containment, tune detection rules, and collaborate with escalation and infrastructure teams to mature our security operations. Hybrid work from Collingwood office is available.

Qualifications

• Hands-on SOC experience required.
• Ability to lead incident response from triage to containment.
• Experience communicating with clients during ongoing incidents.
• Familiarity with threat detection tuning and runbooks.

Responsibilities

• Monitor and triage security alerts across EDR/XDR tooling.
• Lead initial incident response and containment; escalate as needed.
• Serve as client-facing point of contact during incidents.
• Tune detection rules and alert thresholds to reduce false positives.
• Collaborate on vulnerability and patch management oversight.
• Maintain SOC runbooks and escalation matrices.
• Participate in after-hours on-call SOC rotation.
• Help mature SOC capabilities as the function scales.

Skills

Networking fundamentals

SOC operations

EDR tooling

XDR tooling

Microsoft 365 / Azure / Entra ID

ACSC Essential Eight

Incident response

Client communication

On-call / shift work

Independent work

Job description

Systima in Melbourne is seeking an experienced SOC Analyst to join our NOC and SOC team, focusing on monitored security events for our managed clients. This role requires hands-on incident response and direct client communication during active incidents.

You will triage alerts, lead containment, tune detection rules, and collaborate with escalation and infrastructure teams to mature our security operations. Hybrid work from Collingwood office is available.