Senior SOC Threat Hunter & Incident Response Lead

Clicks; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Clicks in Canberra is seeking a skilled Security Analyst with SOC experience and strong capabilities in threat detection, security monitoring, vulnerability assessment and incident response. The role emphasizes threat-driven analysis, monitoring security events, and developing incident response plans while enhancing security controls through testing and collaboration with the security team.

Experience with SIEM (Splunk), EDR, NDR and SOAR is highly valued, as is knowledge of ASD ISM/Essential

Qualifications

• Demonstrated experience working in a SOC as a Security Analyst.
• Hands-on experience with Splunk Enterprise Security.
• Experience with Endpoint Detection and Response (EDR) platforms.
• Experience with Network Detection and Response (NDR) platforms.
• Experience with Security Orchestration, Automation and Response (SOAR) platforms.
• Strong understanding of threat detection, vulnerability assessment and incident response.

Responsibilities

• Conduct threat-driven analysis of system security and emerging cyber threats.
• Analyse threat intelligence and identify system-specific risks.
• Monitor security events and detect potential incidents.
• Develop, maintain and execute incident response plans and playbooks.
• Assess vulnerabilities and recommend appropriate remediation.
• Review security controls and identify gaps or weaknesses.
• Develop procedures for security event monitoring and analysis.
• Support technical leadership and contribute to system testing and evaluation activities.

Skills

SOC experience

Threat detection

Security monitoring

Incident response

Vulnerability assessment

Tools

Splunk Enterprise Security

EDR platforms

NDR platforms

SOAR platforms

Job description

Clicks in Canberra is seeking a skilled Security Analyst with SOC experience and strong capabilities in threat detection, security monitoring, vulnerability assessment and incident response. The role emphasizes threat-driven analysis, monitoring security events, and developing incident response plans while enhancing security controls through testing and collaboration with the security team.

Experience with SIEM (Splunk), EDR, NDR and SOAR is highly valued, as is knowledge of ASD ISM/Essential