SOC Analyst

The Cache Group; Wellington; Hybrid; NZD 90.000 - 120.000; Vollzeit

Zusammenfassung

The Cache Group is seeking a SOC Analyst in Wellington for a permanent hybrid role. You will triage alerts, tune detections, and act as the service advisor for MDR customers.

Workload includes dedicated time for customer training, vendor updates, and monthly service reviews, with on-call responsibilities after a ramp-up period. You will join a collaborative team supporting multiple platforms.

Qualifikationen

• Hands-on SOC experience or strong sysadmin moving into security.
• Experience with SIEM platforms (Sentinel, CrowdStrike, Rapid7).
• Strong detection tuning and alert management.
• Clear communication and customer-facing skills.
• Ability to work independently in a hybrid setup.

Aufgaben

• Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise.
• Be the named analyst and service advisor for your own MDR customers.
• Run each customer's monthly service review and follow through on actions.
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences.
• On-call responsibilities once established, 9-12 months in.

Kenntnisse

SOC experience

SIEM

KQL

Customer communication

Attention to detail

Tools

Microsoft Sentinel

CrowdStrike Falcon

Rapid7 InsightIDR

Jobbeschreibung

Our client is an established MSSP operating across Australia and New Zealand. Their customer base is growing fast, and so is the analyst team behind it, now more than 35 people in region.

They have an immediate need for a SOC Analyst in Wellington, on a permanent hybrid basis, two days a week in the office.

What sets this SOC apart is how the work is structured. Triage is capped at 20 hours a week (usually 15). The rest of your time goes to your own customers, training, vendor updates and team meetings.

Senior analysts mentor the team. Peers back each other up rather than handing work up a chain.

The role

• Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise
• Be the named analyst and service advisor for your own MDR customers
• Run each customer's monthly service review and follow through on actions
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences
• On-call responsibilities once established, 9-12 months in

What you'll need to succeed;

• Hands-on SOC experience, or a strong sysadmin background moving into security
• SIEM experience, ideally Microsoft Sentinel, CrowdStrike Falcon / NG-SIEM or Rapid7 InsightIDR
• KQL and detection tuning experience is a strong advantage
• Clear, confident communication, and comfort leading customer conversations
• A curious, investigative mindset with an eye for what looks wrong
• Ability to work independently early on; this is not a graduate role