SOC Threat Detection Analyst

NTT DATA, Inc.; Sydney; On-site; AUD 96,000 - 152,000; Full time

Job summary

NTT DATA is seeking a SOC Threat Detection Analyst to support a large-scale Security Operations Centre environment in Sydney. The role focuses on threat monitoring, incident triage, log analysis, and detection engineering using SIEMs such as Splunk.

You will identify and respond to cyber threats, contribute to detection capability improvements, and collaborate with security teams to enhance operational resilience in a dynamic contract setting (2.5 months with potential extension). ASAP start.

Qualifications

• Strong previous experience working within a Security Operations Centre (SOC) environment.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Google SecOps.
• Demonstrated capability in threat detection, incident response, and security monitoring.
• Knowledge of log analysis, security event correlation, and detection engineering practices.

Responsibilities

• Monitor and investigate security events, alerts, and incidents using enterprise SIEM platforms.
• Perform incident triage, analysis, escalation, and response activities within the SOC environment.
• Create and enhance threat detection rules, correlation searches, alerts, and use cases.
• Analyse logs and security telemetry from multiple data sources to identify suspicious behaviours.
• Conduct routine SOC operational activities, including health checks, maintenance, and monitoring.
• Produce security reporting, dashboards, incident summaries, and threat trend analysis.
• Collaborate with security teams and stakeholders to improve cyber detection and response capabilities.

Skills

SOC environment experience

Threat detection

Log analysis

Analytical thinking

Communication skills

Education

Cyber Security / Information Security related degree

Tools

Splunk

Microsoft Sentinel

Google SecOps

Job description

Location: Sydney cbd, NSW

Start Date: ASAP

Duration: Initial 2.5 Month Contract with Potential Extension

NTT DATA is seeking a SOC Threat Detection Analyst to support a large-scale Security Operations Centre environment. This role will focus on threat monitoring, incident triage, threat detection engineering, log analysis, and BAU SOC operations using leading SIEM technologies such as Splunk. You will play a key role in identifying and responding to cyber threats while contributing to the continuous improvement of security operations and detection capabilities.

Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?

Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.

Key Responsibilities

• Monitor and investigate security events, alerts, and incidents using enterprise SIEM platforms.


• Perform incident triage, analysis, escalation, and response activities within the SOC environment.


• Create and enhance threat detection rules, correlation searches, alerts, and use cases.


• Analyse logs and security telemetry from multiple data sources to identify suspicious behaviours.


• Conduct routine SOC operational activities, including health checks, maintenance, and monitoring.


• Produce security reporting, dashboards, incident summaries, and threat trend analysis.


• Collaborate with security teams and stakeholders to improve cyber detection and response capabilities.

Skills & Experience

• Strong previous experience working within a Security Operations Centre (SOC) environment.


• Hands-on experience with SIEM technologies such as Splunk, Microsoft Sentinel, or Google SecOps.


• Demonstrated capability in threat detection, incident response, and security monitoring.


• Knowledge of log analysis, security event correlation, and detection engineering practices.


• Strong analytical and problem-solving skills with a proactive approach to cyber investigations.


• Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.


• Relevant qualifications in Cyber Security, Information Security, Computer Science, or a related discipline.

Questions? Reach out: [e-mail]