Senior SOC Lead: Detection, Response & Incident Mastery

BluBiz Solutions; Melbourne; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Flexible hybrid working

Competitive salary package

Learning & certifications

Career progression

Job summary

BluBiz Solutions is seeking a highly technical Senior SOC Analyst to lead the SOC from Melbourne. You will be the senior Level 2 analyst and escalation point, owning complex investigations and incident response while raising the bar for threat detection, response and reporting.

The role sits within our global SOC team and will set standards for quality. The successful candidate will mentor analysts, drive detection use cases and SOAR automation, with deep hands-on knowledge of Microsoft Sentinel

Qualifications

• At least 5 years of cybersecurity experience, including 3 years in a SOC and 2+ years operating at Level 2 or above.

Responsibilities

• Serve as Level 2 escalation point for alerts and incidents; own complex or high-severity cases through to resolution.
• Perform in-depth investigations across endpoint, identity, email, network, and cloud telemetry.
• Correlate events across Sentinel, Defender XDR and CrowdStrike to build an accurate picture of attacker activity.
• Validate, classify and prioritise incidents, and make sound escalation decisions.
• Lead and coordinate the technical response to security incidents across the full lifecycle: preparation, detection, containment, eradication, recovery and lessons learned.
• Execute containment actions per client runbooks.
• Collect and analyse forensic artefacts to support investigations.
• Produce incident reports and post-incident reviews for technical teams and exec stakeholders.
• Plan proactive threat hunts using KQL in Sentinel and CQL in Falcon Next-Gen SIEM.
• Design, build, test and fine-tune detection use cases, including Sentinel analytics rules, Defender XDR detections, Falcon IOAs and SIEM correlation rules.
• Develop and maintain Sentinel automation rules and playbooks and Falcon Fusion SOAR workflows.

Skills

Leadership

Incident response

Threat hunting

MITRE ATT&CK

Communication

Analytical thinking

Mentoring

Cloud security

Education

Bachelor's degree in CS/IT

Tools

Microsoft Sentinel

CrowdStrike Falcon

Defender XDR

Azure Logic Apps

KQL

CQL

Job description

BluBiz Solutions is seeking a highly technical Senior SOC Analyst to lead the SOC from Melbourne. You will be the senior Level 2 analyst and escalation point, owning complex investigations and incident response while raising the bar for threat detection, response and reporting.

The role sits within our global SOC team and will set standards for quality. The successful candidate will mentor analysts, drive detection use cases and SOAR automation, with deep hands-on knowledge of Microsoft Sentinel