SOC Analyst

The Cache Group; Auckland; Hybrid; NZD 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

The Cache Group in Auckland is hiring a SOC Analyst for a permanent hybrid role. You will split time between the office and remote work, with two days per week in the office to collaborate with a growing security team.

You will own triage, investigations and detections tuning across multiple SIEMs, serving MDR customers and delivering monthly service reviews. Mentoring from senior analysts and supportive peers help you grow into the role.

Qualifications

• Hands-on SOC experience or strong sysadmin background moving into security.
• Experience with SIEM platforms such as Microsoft Sentinel, CrowdStrike Falcon/NG-SIEM or Rapid7 InsightIDR.
• KQL and detection tuning experience is a strong advantage.
• Excellent communication and ability to lead customer conversations.

Responsibilities

• Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise.
• Be the named analyst and service advisor for your own MDR customers.
• Run each customer's monthly service review and follow through on actions.
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences.
• On-call responsibilities once established, 9-12 months in.

Skills

Hands-on SOC experience

Sysadmin background into security

SIEM experience

KQL/detection tuning

Clear communication

Curious mindset

Independent work

Tools

Microsoft Sentinel

CrowdStrike Falcon

Rapid7 InsightIDR

Job description

Our client is an established MSSP operating across Australia and New Zealand. Their customer base is growing fast, and so is the analyst team behind it, now more than 35 people in region.

They have an immediate need for a SOC Analyst in Auckland, on a permanent hybrid basis, two days a week in the office.

What sets this SOC apart is how the work is structured. Triage is capped at 20 hours a week (usually 15). The rest of your time goes to your own customers, training, vendor updates and team meetings.

Senior analysts mentor the team. Peers back each other up rather than handing work up a chain.

The role

• Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise
• Be the named analyst and service advisor for your own MDR customers
• Run each customer's monthly service review and follow through on actions
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences
• On-call responsibilities once established, 9-12 months in

What you'll need to succeed;

• Hands-on SOC experience, or a strong sysadmin background moving into security
• SIEM experience, ideally Microsoft Sentinel, CrowdStrike Falcon / NG-SIEM or Rapid7 InsightIDR
• KQL and detection tuning experience is a strong advantage
• Clear, confident communication, and comfort leading customer conversations
• A curious, investigative mindset with an eye for what looks wrong
• Ability to work independently early on; this is not a graduate role