Expression of interest_Senior SOC Analyst

Fujitsu; Auckland; On-site; NZD 120,000 - 170,000; Full time

Job summary

Fujitsu is seeking an experienced Senior SOC Analyst to join our security operations team across Auckland and Wellington, with Canberra as a regional location. The role involves advanced monitoring, investigation and incident coordination in a rotating 24/7 roster, including on-call coverage as required.

You will escalate complex incidents, mentor junior analysts, and collaborate with cross-functional teams to improve detection and response.

Qualifications

• Senior SOC experience in a security operations or MSSP environment.
• Experience leading or coordinating a shift and mentoring peers.
• Strong written and verbal communication for customer updates and reports.

Responsibilities

• Perform advanced analysis and investigation of security alerts and incidents across customer environments.
• Coordinate initial incident scoping and response activities within approved procedures.
• Lead shift handovers, maintain accurate investigation records and clear ownership.
• Engage in customer discussions for senior analytical input and next steps.
• Contribute to detection development, playbooks and improvement actions.

Skills

Security operations

Incident investigations

SIEM

EDR

XDR

Mentoring

Customer communication

Shift coordination

Threat hunting

Education

NV1 security clearance

Tools

Microsoft Sentinel

CrowdStrike Falcon

SOAR

ServiceNow SecOps

Job description

Job Location: Auckland, Barton, Wellington

Location Flexibility: Multiple Locations in Country

Req Id: 13181

Posting Start Date: 10/12/26

We Are Fujitsu

We use technology to make happier lives. We are a global leader in technology and business solutions that transform organizations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers.

About The Role

We are seeking an experienced Senior Security Operations Centre (SOC) Analyst, based in Canberra / Auckland / Wellington, to provide advanced monitoring, investigation, triage and incident coordination across managed customer environments. This is a hands‑on senior operational role within a rotating 24/7 roster, including scheduled day, evening, overnight, weekend and public holiday coverage.

Australian or New Zealand citizenship is mandatory. Current or reinstatable AGSVA NV1 Security clearance or equivalent clearance level in NZ is required.

Role Purpose

The Senior SOC Analyst acts as the technical escalation point during assigned shifts, validates complex or high‑severity cases, supports timely and evidence‑based decisions, and maintains clear ownership through escalation, response and handover. The role provides day‑to‑day technical leadership without formal line‑management responsibility and supports developing analysts through mentoring, peer review and practical guidance.

1. Perform advanced analysis and investigation of security alerts, incidents and anomalous activity across customer environments.
2. Act as a senior technical escalation point for complex, high‑severity or time‑critical events, validating findings, incident classifications, escalation decisions and recommended customer actions.
3. Correlate evidence across endpoint, identity, cloud, network, authentication and application data sources to determine scope, impact and likely attacker behaviour.

Incident Coordination

• Coordinate initial incident scoping and support response activity within approved customer procedures, authority and escalation paths.
• Review complex escalations and provide constructive peer review of investigations, tickets, reports and recommended response actions.
• Contribute to incident reviews and lessons learned, translating operational findings into improvements to processes, playbooks and detection outcomes.

Shift Leadership and Quality Assurance

• Provide technical oversight and mentoring during assigned shifts, helping analysts make sound decisions while retaining appropriate case ownership.
• Maintain and assure clear, accurate and complete investigation records, customer updates, shift logs and handover notes.
• Lead structured shift handovers and ensure every active incident has a documented status, owner, risk position and next action.

Customer Engagement and Service Excellence

• Participate in customer discussions where senior analytical input or a clear explanation of an incident, evidence and recommended next steps is required.
• Contribute to customer reporting, service reviews and improvement activities using evidence from investigations and operational trends.
• Provide evidence‑based recommendations on recurring risks, telemetry gaps, detection quality and investigation improvements.

SOC Process Improvement and Collaboration

• Work with the Advanced Cyber Intelligence and Response Team (ACIRT) to improve detection use cases, playbooks, enrichment and response procedures based on operational evidence.
• Identify recurring operational issues and recommend practical improvements to automation, enrichment, detection logic and case workflows.
• Collaborate with specialist cyber teams where investigation, customer or service‑improvement activities require additional expertise.

Mandatory Skills And Experience

• Demonstrated experience in a Security Operations Centre, managed security service, incident response function or comparable operational security environment, including experience at a senior, Tier 2 or equivalent escalation level.
• Experience independently managing complex investigations, assessing severity, business impact and scope, and selecting appropriate escalation paths.
• Strong analytical and investigative capability across SIEM, EDR or XDR technologies, with practical knowledge of endpoint, identity, cloud, network and application security events.
• Experience leading or coordinating work during a shift, high‑priority investigation or security incident, including mentoring and quality review.
• Clear written and verbal communication skills, including customer‑facing incident updates, concise technical reporting and disciplined case documentation.
• Australian or New Zealand citizenship is mandatory. A current or reinstatable AGSVA NV1 security clearance is required.
• Threat hunting may be undertaken where operational priorities, customer requirements and available capability support it, but it is not a core requirement of the position.
• Willingness and ability to work the agreed rotating roster across days, evenings, nights, weekends and public holidays.

Desired Experience And Knowledge

• Hands‑on experience with Microsoft Sentinel, including incident investigation and Kusto Query Language.
• Hands‑on experience with CrowdStrike Falcon for endpoint detection, investigation and response.
• Experience with SOAR, case management or ServiceNow SecOps.
• Experience tuning detections, improving investigation playbooks or identifying telemetry and coverage gaps.
• Familiarity with MITRE ATT&CK or a comparable framework for describing adversary behaviours and investigative findings.
• Relevant Microsoft, CrowdStrike or comparable industry certifications are desirable.

Relocation Supported: No

Visa Sponsorship Approved: No

Why Fujitsu?

We are an organization with a strong set of values and a history of respecting fairness and equality, whilst promoting diversity, equity, and inclusion. We constantly push ourselves to do better and strive to bring together a diverse mix of perspectives and talents in an inclusive environment, where we encourage our people to bring their full selves to work. We call this Be Completely You.

• We put people first. We believe in the power of diversity to drive innovation and our AWEI (Australian Workplace Equality Index) Platinum Employer status, and Rainbow Tick certification for LGBTI+ inclusion show that we value an inclusive culture.
• We offer tailored career paths across our global organization to support your professional and personal growth.
• Our customers trust us. We have an excellent reputation across the region and globally.
• Best in-class reward and recognition programs flexible work, volunteering leave, and more.
• We live our values of aspiration, trust, and empathy, all day, every day.

Commitment to Diversity, Equity and Inclusion

As an inclusive employer, Fujitsu aims to recruit a diverse range of talents to help us achieve our purpose. In line with our diversity, equity, and inclusion strategy, we highly welcome applications from women and gender‑diverse people; Aboriginal and Torres Strait Islander people; Māori and Pacific people; LGBTI+ people; people with a disability; culturally and linguistically diverse people; veterans, Australian Defence Force (ADF) and emergency responders. Transgender and gender‑diverse applicants can request a copy of our Frequently Asked Questions to assist with the recruitment journey.

If you don't tick every box in this job description, please don't rule yourself out. Research suggests that underrepresented groups tend to only apply if they meet every requirement. We focus on hiring people who value inclusion, collaboration, adaptability, courage, and integrity, rather than ticking boxes so if this resonates with you, then please apply. For more information, please email [e-mail].

Search Firm Representatives – PLEASE READ

Fujitsu does not accept unsolicited assistance from search firms for employment opportunities. All CVs or resumes submitted by search firms to any employee at our company without a valid written agreement in place for this position will be considered the sole property of our company. No fee will be paid if a candidate is hired by Fujitsu due to an agency referral where no existing agreement is in place with the Fujitsu Talent Acquisition Team. Where agency agreements are in place, introductions must be through engagement by the Fujitsu Talent Acquisition Team.

For Security Cleared Roles – PLEASE NOTE

Due to the inherent requirements of the role, candidates must be Australian Citizens and hold an Australian Federal Government Security Clearance. The role will or will likely involve access to controlled technology and must satisfy additional restrictions and requirements as a consequence of the International Traffic in Arms Regulations and the Export Administration Regulations. As a consequence of these restrictions and requirements, applicants may be adversely impacted if they are not Australian citizens, are dual nationals, hold citizenship from proscribed countries, or are not of Australian national origin. Please refer to Discrimination (Fujitsu Australia Limited) Exemption 2017 (No 1) Notifiable instrument NI2020-672 (ACT).