L3 SOC Analyst

Hamilton Barnes ?; United States; Remote; AUD 127,000 - 184,000; Full time

Benefits offered by this job

Fully remote role

Collaborative SOC team

Opportunity to grow technical and leadership skills

Job summary

A leading cybersecurity firm seeks an experienced L3 SOC Analyst to join their remote team. In this role, you'll own complex security incidents, analyze and respond to high-severity events, and optimize SOC processes. Strong technical expertise in SIEM platforms and incident investigation is required. Excellent communication skills are essential for presenting findings to non-technical stakeholders. This position offers the chance to grow your skills in a mature 24/7 SOC environment.

Qualifications

• Proven experience as a SOC Analyst (L3) in a 24x7 security operations environment.
• Strong technical expertise in SIEM platforms, EDR, network monitoring, and incident investigation.
• Experience in tuning security alerts and improving SOC processes.
• Ability to own incidents and make decisions under pressure.
• Excellent communication for non-technical stakeholders.
• Familiarity with developing SOC playbooks and SOPs.
• Analytical mindset with attention to detail.

Responsibilities

• Investigate and triage critical security alerts from detection to closure.
• Tune and improve alert rules to reduce noise and improve SOC efficiency.
• Lead complex security incidents with clear decision-making and ownership.
• Lead complex security incidents with ownership.
• Communicate findings to non-technical stakeholders.
• Develop and improve SOC playbooks and decision trees.
• Maintain SOPs and support QA in the SOC.

Skills

Experience as SOC Analyst (L3)

Technical expertise in SIEM platforms

Proficiency in EDR and network monitoring

Alert tuning ability

Communication skills

Analytical mindset

SOPs

Communication

Tools

SIEM platforms

EDR tools

Network monitoring

Job description

We are looking for an experienced L3 SOC Analyst to join a fast-paced, 24x7 Security Operations Centre. This role is perfect for someone who thrives on ownership of complex security incidents, alert tuning, and ensuring consistent, high-quality incident response across the SOC.

You will be responsible for analyzing and responding to high‑severity security events, optimizing SOC processes, and presenting findings to both technical and non‑technical stakeholders.

Key Responsibilities

• Investigate and triage critical security alerts from detection to closure, including validation, severity assessment, containment guidance, escalation, and root cause analysis.
• Determine true positive vs. false positive alerts using context enrichment, correlation across data sources, and anomaly detection.
• Tune and improve alert rules to reduce noise and improve SOC efficiency; quantify improvements such as alert reduction and MTTR.
• Lead complex security incidents (e.g., ransomware, BEC, insider threats, cloud breaches) with clear decision‑making and ownership.
• Communicate major incident findings and risk impact effectively to non‑technical stakeholders.
• Develop and improve SOC playbooks and decision trees, ensuring consistency in analyst decision‑making.
• Maintain and follow SOPs, conduct peer reviews, and support quality assurance initiatives in the SOC.

About You

• Proven experience as a SOC Analyst (L3) in a 24x7 security operations environment.
• Strong technical expertise in SIEM platforms, EDR, network monitoring, and incident investigation.
• Experience in tuning security alerts and improving SOC processes.
• Able to take ownership of incidents and make operational decisions under pressure.
• Excellent communication skills with the ability to present technical issues to non‑technical stakeholders.
• Familiarity with developing and improving SOC playbooks and SOPs.
• Strong analytical mindset with attention to detail and process adherence.

Why Join

• Fully remote role with a collaborative SOC team.
• Opportunity to work on complex, high‑impact security incidents.
• Grow your technical and leadership skills in a mature SOC environment