SOC Analyst

Jobtailor; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

Jobtailor in Sydney, Australia, seeks an experienced SOC Analyst to investigate SIEM events, lead incident response, threat hunting, and vulnerability assessments for a portfolio of customers. You will mentor junior analysts, build detections, and collaborate across the SOC to strengthen detection capability.

Requirements include 3+ years with SIEM/XDR/EDR, Microsoft security, Linux/Unix, incident response and forensics, and knowledge of MITRE ATT&CK, NIST and ISO 27000.

Qualifications

• 3+ years working with modern detection and response tooling including SIEM, XDR and EDR
• Solid grounding in Microsoft security technologies
• Confidence working across Linux or Unix environments
• Background in enterprise-scale security operations
• Exposure to incident response and digital forensics
• Working knowledge of MITRE ATT&CK, NIST and ISO 27000 frameworks
• Clear communication skills and ability to translate technical detail for any audience
• Subject to state and federal police background checks
• Unrestricted right to work in Australia
• Visa sponsorship is not available
• Bonus: Broad understanding of cloud, networking and firewall technologies
• Bonus: Experience with vulnerability management tooling such as Rapid7, Tenable or Qualys
• Bonus: Familiarity with ITSM platforms and processes

Responsibilities

• Investigate SIEM events, track emerging threats and uncover intrusion attempts
• Own incident response from triage through escalation to resolution
• Analyse phishing activity, suspicious domains and IP addresses to identify genuine risk
• Lead threat hunting and vulnerability assessments across customer environments
• Build high‑fidelity detections through alert tuning, rule creation and system improvements
• Mentor junior analysts and improve capability across the wider SOC
• Work across daily operations, threat analysis and proactive defence for a broad customer base
• Collaborate with SOC peers to strengthen detection capability and deliver customer outcomes

Skills

Incident Response

Threat Hunting

Vulnerability Assessment

SIEM

XDR

EDR

Digital Forensics

MITRE ATT&CK

NIST

ISO 27000

Tools

Microsoft Security Technologies

Rapid7

Tenable

Qualys

ITSM Platforms

Job description

• Investigate SIEM events, track emerging threats and uncover intrusion attempts
• Own incident response from triage through escalation to resolution
• Analyse phishing activity, suspicious domains and IP addresses to identify genuine risk
• Lead threat hunting and vulnerability assessments across customer environments
• Build high‑fidelity detections through alert tuning, rule creation and system improvements
• Mentor junior analysts and improve capability across the wider SOC
• Work across daily operations, threat analysis and proactive defence for a broad customer base
• Collaborate with SOC peers to strengthen detection capability and deliver customer outcomes

Requirements

• 3+ years working with modern detection and response tooling including SIEM, XDR and EDR
• Solid grounding in Microsoft security technologies
• Confidence working across Linux or Unix environments
• Background in enterprise‑scale security operations
• Exposure to incident response and digital forensics
• Working knowledge of MITRE ATT&CK, NIST and ISO 27000 frameworks
• Clear communication skills and ability to translate technical detail for any audience
• Subject to state and federal police background checks
• Unrestricted right to work in Australia
• Visa sponsorship is not available
• Bonus: Broad understanding of cloud, networking and firewall technologies
• Bonus: Experience with vulnerability management tooling such as Rapid7, Tenable or Qualys
• Bonus: Familiarity with ITSM platforms and processes

Core Competencies

Demonstrates expertise in incident response, threat hunting, and vulnerability assessments, with a strong foundation in SIEM, XDR, and EDR tools. Proficient in Microsoft security technologies and familiar with frameworks such as MITRE ATT&CK, NIST, and ISO 27000.

Highest-signal resume keywords

• Incident Response
• Threat Hunting
• SIEM Tooling
• Microsoft Security Technologies
• Vulnerability Management

Hard Skills

• Incident Response
• Threat Hunting
• Vulnerability Assessment
• SIEM
• XDR
• EDR
• Digital Forensics
• MITRE ATT&CK
• NIST
• ISO 27000

Soft Skills

• Clear Communication
• Mentoring

Industry Keywords

• Security Operations
• Phishing Analysis
• Intrusion Detection
• Cloud Technologies
• Networking
• Firewall Technologies

Tools & Technologies

• Microsoft Security Technologies
• Rapid7
• Tenable
• Qualys
• ITSM Platforms