SOC Threat Detection Analyst

NTT DATA, Inc.; Sydney; On-site; AUD 83,000 - 124,000; Part time

Job summary

NTT DATA, Inc. in Sydney is seeking a SOC Threat Detection Analyst on a 2.5 month contract to monitor, triage and respond to security events in a large SOC environment. You will engineer detections, analyze logs, and generate reports using leading SIEMs such as Splunk, Microsoft Sentinel, and Google SecOps.

Immediate start and collaboration with global teams are required. The role emphasizes threat detection engineering, incident response, and continuous improvement of security operations.

Qualifications

• Experience in a Security Operations Centre (SOC) environment.
• Knowledge of log analysis, event correlation and detection engineering.
• Strong analytical and problem‑solving skills.
• Excellent written and verbal communication with stakeholders.

Responsibilities

• Monitor security events, alerts and incidents using enterprise SIEM platforms.
• Perform incident triage, analysis, escalation and response within SOC.
• Create and tune threat detection rules, correlations, alerts and use cases.
• Analyse logs and telemetry from multiple data sources to identify threats.
• Conduct routine SOC operations, health checks and monitoring.
• Produce security reports, dashboards and threat trend analyses.
• Collaborate with security teams to improve detection and response capabilities.

Skills

SOC operations

Threat detection

Incident triage

Log analysis

Communication

Education

Cyber Security / Information Security related degree

Tools

Splunk

Microsoft Sentinel

Google SecOps

Job description

Location: Sydney cbd, NSW

Start Date: ASAP

Duration: Initial 2.5 Month Contract with Potential Extension

NTT DATA is seeking a SOC Threat Detection Analyst to support a large-scale Security Operations Centre environment. This role will focus on threat monitoring, incident triage, threat detection engineering, log analysis, and BAU SOC operations using leading SIEM technologies such as Splunk. You will play a key role in identifying and responding to cyber threats while contributing to the continuous improvement of security operations and detection capabilities.

Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?

Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.

Key Responsibilities

• Monitor and investigate security events, alerts, and incidents using enterprise SIEM platforms.
• Perform incident triage, analysis, escalation, and response activities within the SOC environment.
• Create and enhance threat detection rules, correlation searches, alerts, and use cases.
• Analyse logs and security telemetry from multiple data sources to identify suspicious behaviours.
• Conduct routine SOC operational activities, including health checks, maintenance, and monitoring.
• Produce security reporting, dashboards, incident summaries, and threat trend analysis.
• Collaborate with security teams and stakeholders to improve cyber detection and response capabilities.

Skills & Experience

• Strong previous experience working within a Security Operations Centre (SOC) environment.
• Hands-on experience with SIEM technologies such as Splunk, Microsoft Sentinel, or Google SecOps.
• Demonstrated capability in threat detection, incident response, and security monitoring.
• Knowledge of log analysis, security event correlation, and detection engineering practices.
• Strong analytical and problem-solving skills with a proactive approach to cyber investigations.
• Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.
• Relevant qualifications in Cyber Security, Information Security, Computer Science, or a related discipline.

Questions? Reach out: [e-mail]