Cyber Security Analyst – SOC & Incident Response

About the role

We are partnering with a large enterprise in Perth to strengthen its detection and response capabilities. As a Cyber Security Analyst you will work within a mature Security Operations Centre, focusing on real‑time threat monitoring, detection engineering and incident response. The role will also support the strategic migration of the organisation’s SIEM platform from Splunk to Microsoft Sentinel.

Key responsibilities

• Perform continuous security event monitoring, triage and analysis across enterprise environments.
• Detect, investigate and respond to security incidents, including root‑cause analysis and remediation.
• Monitor and optimise security controls such as endpoint, network, identity and cloud telemetry.
• Leverage threat intelligence to improve detection rules and reduce false positives.
• Support the migration and optimisation of SIEM pipelines from Splunk to Microsoft Sentinel.
• Align SOC processes with the NIST Cybersecurity Framework and incident‑response best practices.

Required profile

• Proven experience working in a Security Operations Centre.
• Strong hands‑on expertise with SIEM platforms (Microsoft Sentinel, Splunk or similar).
• Solid understanding of the incident response lifecycle, including containment, eradication and recovery.
• Familiarity with security monitoring in hybrid/cloud environments, preferably Azure.
• Working knowledge of NIST frameworks and defensive security controls.

Required skills

• Microsoft Sentinel
• Splunk
• Azure cloud services
• NIST Cybersecurity Framework
• SIEM technologies