Senior SOC Analyst

About the role

A client's high-performing cyber security operations team in Canberra, ACT is looking for an experienced Senior SOC Analyst. This is a hands-on operational role in a 24/7 SOC focused on threat detection, incident investigation, escalation management and continuous improvement. The role suits someone who investigates complex cyber incidents, leads technical responses and mentors junior analysts.

Key responsibilities

• Investigate and analyse complex security alerts, incidents and anomalous activity
• Act as a senior technical escalation point for high-severity events
• Correlate evidence across endpoint, cloud, identity, network, authentication and application data sources
• Coordinate incident response and support containment and recovery
• Review and validate investigations, classifications and recommended actions
• Mentor SOC analysts and provide technical guidance during shifts
• Maintain case documentation, incident records, customer communications and shift handovers
• Contribute to incident reviews, lessons learned and continuous improvement
• Help develop detection use cases, playbooks and response procedures
• Communicate incident findings, risks and recommendations to stakeholders

Required profile

• Demonstrated experience in a SOC, MSSP, incident response team or similar environment
• Senior Analyst, Tier 2 or Tier 3 level or equivalent
• Independent management of complex investigations and incidents
• Technical leadership, mentoring or shift coordination experience
• Rotating 24/7 roster including days, nights, weekends and public holidays
• Australian citizenship and current NV1 security clearance (mandatory)

Required skills

• Hands-on experience with SIEM, EDR and XDR
• Microsoft Sentinel and Kusto Query Language (KQL) highly regarded
• CrowdStrike Falcon, SOAR platforms or ServiceNow SecOps desirable
• Familiarity with MITRE ATT&CK and modern threat frameworks advantageous

What we offer

• A mature, highly capable cyber security operations environment
• Complex incident response and threat investigation work
• Collaborative, supportive team culture
• Opportunity to mentor junior analysts
• Industry-leading tools and long-term work on mission-critical environments

To apply, submit your current resume/CV through the advertised application process; suitable candidates will be contacted for more information.