SOC Analyst

orchard.vincere.io; Auckland; On-site; NZD 70,000 - 110,000; Full time

Job summary

orchard.vincere.io is seeking a SOC Analyst in Auckland to join a global security team. You’ll monitor, analyze, and respond to cyber threats using SIEM, EDR, and related tools, helping to improve our security posture and incident response capabilities. The role operates on a four-on, four-off schedule with ten-hour shifts.

You’ll work with cross-functional IT teams, develop junior analysts, and produce clear incident reports while staying current on evolving threats and mitigation strategies.

Qualifications

• Relevant security operations experience is essential, preferably in a shift-based setting.
• Familiarity with SIEM, EDR/XDR, and other cybersecurity technologies.
• Understanding of network traffic analysis, TCP/IP, and internet protocols.
• Knowledge of multiple operating systems and hardening methodologies.
• Experience with SOAR, Web Application Firewalls, and NDR technologies is a plus.
• Strong problem-solving skills and the ability to make sound judgments under pressure.
• High degree of self-motivation and a collaborative mindset.
• Relevant cybersecurity certifications are a plus.
• Programming or scripting skills are a plus.

Responsibilities

• Operate and monitor security tools such as SIEM, IDS, and EDR to detect and respond to malicious activity.
• Conduct in-depth analysis of network, application, and system data to identify potential threats and anomalies.
• Perform network and host-based analysis during incident response activities, ensuring threats are quickly contained and remediated.
• Help develop junior analysts by providing feedback, training, and guidance.
• Create clear reports on security incidents and maintain detailed records of investigations and remediation efforts.
• Stay current on emerging threats and vulnerabilities to help improve our detection and response capabilities.

Skills

Security operations experience

SIEM

EDR/XDR

Network traffic analysis

OS hardening

SOAR

Web Application Firewalls

NDR technologies

Problem-solving

Self-motivation

Team collaboration

Cybersecurity certifications

Python scripting

PowerShell

Job description

Position Description: SOC Analyst

Location:, Auckland

Reporting to: SOC Team Lead

Your Mission

As a SOC Analyst, you'll be a key member of our global security team. You'll be on the front lines of our

defensive security operations, helping to identify, respond to, and contain cyber threats. This hands-on

role involves monitoring and analyzing security alerts, collaborating with other IT teams, and helping to

improve our security posture. You'll need to be quick, detail-oriented, and comfortable working in a fast-

paced environment. This position follows a four-on, four-off work schedule, with ten-hour shifts each

day.

Key Responsibilities

• Operate and monitor security tools such as SIEM, IDS, and EDR to detect and respond to malicious activity.
• Conduct in-depth analysis of network, application, and system data to identify potential threats and anomalies.
• Perform network and host-based analysis during incident response activities, ensuring threats are quickly contained and remediated.
• Help develop junior analysts by providing feedback, training, and guidance.
• Create clear reports on security incidents and maintain detailed records of investigations and remediation efforts.
• Stay current on emerging threats and vulnerabilities to help improve our detection and response capabilities.

You have

• Relevant security operations experience is essential, preferably in a shift-based setting.
• Familiarity with SIEM, EDR/XDR, and other cybersecurity technologies.
• Understanding of network traffic analysis, TCP/IP, and internet protocols.
• Knowledge of multiple operating systems and hardening methodologies.
• Experience with SOAR, Web Application Firewalls, and NDR technologies is a plus.
• Strong problem-solving skills and the ability to make sound judgments under pressure.
• High degree of self-motivation and a collaborative mindset.
• Relevant cybersecurity certifications (e.g., Blue Team L1, GCIA) are a plus.
• Programming or scripting skills (e.g., Python, PowerShell) are a plus.