Sydney SOC Threat Detection Analyst | SIEM Expert

NTT DATA, Inc.; Sydney; Presencial; AUD 96.000 - 152.000; Tempo integral

Resumo da vaga

NTT DATA is seeking a SOC Threat Detection Analyst to support a large-scale Security Operations Centre environment in Sydney. The role focuses on threat monitoring, incident triage, log analysis, and detection engineering using SIEMs such as Splunk.

You will identify and respond to cyber threats, contribute to detection capability improvements, and collaborate with security teams to enhance operational resilience in a dynamic contract setting (2.5 months with potential extension). ASAP start.

Qualificações

• Strong previous experience working within a Security Operations Centre (SOC) environment.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Google SecOps.
• Demonstrated capability in threat detection, incident response, and security monitoring.
• Knowledge of log analysis, security event correlation, and detection engineering practices.

Responsabilidades

• Monitor and investigate security events, alerts, and incidents using enterprise SIEM platforms.
• Perform incident triage, analysis, escalation, and response activities within the SOC environment.
• Create and enhance threat detection rules, correlation searches, alerts, and use cases.
• Analyse logs and security telemetry from multiple data sources to identify suspicious behaviours.
• Conduct routine SOC operational activities, including health checks, maintenance, and monitoring.
• Produce security reporting, dashboards, incident summaries, and threat trend analysis.
• Collaborate with security teams and stakeholders to improve cyber detection and response capabilities.

Conhecimentos

SOC environment experience

Threat detection

Log analysis

Analytical thinking

Communication skills

Formação

Cyber Security / Information Security related degree

Ferramentas

Splunk

Microsoft Sentinel

Google SecOps

Descrição da vaga

NTT DATA is seeking a SOC Threat Detection Analyst to support a large-scale Security Operations Centre environment in Sydney. The role focuses on threat monitoring, incident triage, log analysis, and detection engineering using SIEMs such as Splunk.

You will identify and respond to cyber threats, contribute to detection capability improvements, and collaborate with security teams to enhance operational resilience in a dynamic contract setting (2.5 months with potential extension). ASAP start.