Senior SOC Analyst: SIEM, IR & Cloud Security

Launch Group; Sydney; On-site; AUD 90,000 - 140,000; Full time

Job summary

Launch Group is seeking a hands-on SOC Analyst to join a 24/7 SOC team in a leading Australian enterprise. You will monitor security events, investigate incidents and drive improvements across on-prem and cloud environments.

You should have 3–5+ years in security operations, strong Splunk skills, and experience with vulnerability management, endpoint protection and network security tools. The role emphasises threat detection, incident response and proactive reporting.

Qualifications

• Strong experience with SIEM technologies, particularly Splunk.
• Proven capability in security monitoring, alert triage, incident investigation and remediation.
• Hands-on experience with vulnerability management, endpoint protection, IDS/IPS and network security tools.
• Knowledge of cloud security across AWS, Azure and/or Google Cloud Platform.
• Scripting and automation experience is advantageous.
• 3–5+ years’ experience in security operations or cyber security analysis.

Responsibilities

• Monitor, analyse and investigate security events and incidents across SIEM and security platforms
• Develop and tune SIEM use cases, alerts, dashboards and reporting.
• Support log onboarding, threat detection improvements and operational security processes
• Configure, maintain and optimise SIEM technologies, including platform upgrades and availability management
• Collaborate with technical, delivery and stakeholder teams to provide operational security insights and reporting
• Participate in incident response activities and security exercises
• Contribute to process improvement, documentation and ongoing enhancement of security operations capabilities

Skills

Security monitoring

Threat detection

Incident response

Log analysis

Analytical thinking

Tools

Splunk

IDS/IPS

Vulnerability management

Endpoint protection

Job description

Launch Group is seeking a hands-on SOC Analyst to join a 24/7 SOC team in a leading Australian enterprise. You will monitor security events, investigate incidents and drive improvements across on-prem and cloud environments.

You should have 3–5+ years in security operations, strong Splunk skills, and experience with vulnerability management, endpoint protection and network security tools. The role emphasises threat detection, incident response and proactive reporting.