Job Summary
We are seeking an experienced Senior SOC Analyst to join our clients high-performing cyber security operations team based in Canberra, ACT. This is a hands-on operational role suited to a security professional with strong experience investigating complex cyber incidents, leading technical responses, and mentoring junior analysts within a fast-paced Security Operations Centre environment.
Working as part of a 24/7 SOC, you will play a key role in threat detection, incident investigation, escalation management, and continuous improvement activities across enterprise environments. The ideal candidate will bring strong analytical capability, excellent communication skills, and the ability to make sound decisions during high-priority security events.
This challenging and rewarding opportunity offers exposure to advanced cyber security operations, cutting-edge security technologies, and the chance to contribute to the protection of critical systems and services.
What's in it for you?
- Opportunity to work in a mature and highly capable cyber security operations environment
- Exposure to complex incident response and threat investigation activities
- Collaborative and supportive team culture
- Opportunity to mentor and develop junior analysts
- Work with industry-leading cyber security tools and technologies
- Long-term opportunity supporting mission-critical environments
- Investigate and analyse complex security alerts, incidents, and anomalous activity
- Act as a senior technical escalation point for high-severity cyber security events
- Correlate evidence across endpoint, cloud, identity, network, authentication and application data sources
- Coordinate incident response activities and support containment and recovery efforts
- Review and validate investigations, incident classifications, and recommended response actions
- Provide technical guidance and mentorship to SOC analysts during operational shifts
- Maintain high-quality case documentation, incident records, customer communications and shift handovers
- Contribute to incident reviews, lessons learned, and continuous improvement initiatives
- Support the development and enhancement of detection use cases, playbooks and response procedures
- Engage with stakeholders to communicate incident findings, risks and recommended actions
- Demonstrated experience within a Security Operations Centre, Managed Security Service, Incident Response Team, or similar cyber security environment
- Experience operating at a Senior Analyst, Tier 2, Tier 3, or equivalent escalation level
- Strong hands-on experience with SIEM, EDR and XDR technologies
- Proven ability to independently manage complex cyber security investigations and incidents
- Experience providing technical leadership, mentoring or shift coordination
- Excellent analytical, problem-solving and investigative skills
- Strong written and verbal communication skills
- Hands-on experience with Microsoft Sentinel and Kusto Query Language (KQL) highly regarded
- Experience with CrowdStrike Falcon, SOAR platforms, or ServiceNow SecOps desirable
- Familiarity with MITRE ATT&CK and modern cyber threat frameworks advantageous
- Ability to work a rotating 24/7 roster including days, nights, weekends and public holidays
- Australian Citizenship is mandatory
- Current NV1 Security Clearance required
To apply and be considered for this role, please submit your current resume/CV through the advertised application process. Suitable candidates will be contacted to discuss the opportunity further and receive additional information about the position.
We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.
#SCR-matt-kiss
