SOC Analyst

Secure Internet Storage Solutions; Gold Coast City; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Mobile phone provided

Laptop provided

Hybrid working arrangements

Input into detection strategy

Job summary

Secure Internet Storage Solutions is seeking a Senior SOC Analyst on the Gold Coast (Southport) to lead investigations, drive detection engineering, and shape the SOC’s operations.

You will mentor L1/L2 analysts, tune detections in QRadar and SentinelOne, and communicate findings to both technical staff and executives while supporting Essential Eight remediation for clients.

Qualifications

• 3+ years in a SOC, including time as an escalation point and incident responder.
• Hands-on SIEM and EDR experience.
• Solid Windows and Active Directory attack/defence knowledge (Sysmon, event log analysis, process injection, persistence, etc.).
• Strong written communication: you can brief a sysadmin and a board member.
• Willingness to work a rotating roster including weekends and after-hours.

Responsibilities

• Lead response on escalated incidents end to end: scoping, containment, eradication, and client communication through to close-out.
• Build and tune detections in IBM QRadar and SentinelOne.
• Act as escalation point and mentor for L1/L2 analysts, and drive improvements to triage processes.
• Support client security uplift, including Essential Eight assessment and remediation work.
• Translate findings into clear reporting for both technical staff and executive audiences.

Skills

SOC experience

SIEM

EDR

Windows AD

Communication

Roster flexibility

Education

Degree in IT/Cyber

Tools

QRadar

SentinelOne

Job description

Secure Internet Storage Solutions – Southport QLD

Senior SOC Analyst - Gold Coast (Southport)

Secure-ISS is a Gold Coast-headquartered MSSP delivering 24/7 SOC, detection engineering and incident response to organisations across Australia. We're hiring an experienced analyst to lead investigations, drive detection engineering and help shape how our SOC operates.

This role reports to the Security Operations Manager.

What you'll own

• Lead response on escalated incidents end to end: scoping, containment, eradication, and client communication through to close-out
• Build and tune detections in IBM QRadar and SentinelOne.
• Act as escalation point and mentor for L1/L2 analysts, and drive improvements to triage processes
• Support client security uplift, including Essential Eight assessment and remediation work
• Translate findings into clear reporting for both technical staff and executive audiences

What you bring

• 3+ years in a SOC, including time as an escalation point and incident responder
• Hands-on SIEM and EDR experience
• Solid Windows and Active Directory attack/defence knowledge (Sysmon, event log analysis, process injection, persistence, etc.)
• Strong written communication: you can brief a sysadmin and a board member in the same afternoon
• Willingness to work a rotating roster including weekends and after-hours

Nice to have

• Degree in IT/Cyber, or relevant certifications
• Scripting and automation: PowerShell, Python, and SOAR/workflow tooling
• Familiarity with the ASD Essential Eight and Australian compliance landscape

What we offer

• Competitive salary and allowances, based on skills and experience
• Mobile phone and laptop provided
• Hybrid working arrangements
• Genuine input into detection strategy, automation and SOC processes
• Based in Southport on the Gold Coast