SOC Analyst

About This Role

This SOC Analyst role is with an established MSSP, supporting a growing customer base across Australia and New Zealand. The position involves triaging and investigating security alerts, managing dedicated MDR customers, and providing security advice. It suits an analyst with a curious and investigative mindset, comfortable with independent work and customer interactions.

Responsibilities

• Triage and investigate alerts across Sentinel, Rapid7, and CrowdStrike NG-SIEM
• Tune detections to reduce noise
• Be the named analyst and service advisor for your own MDR customers
• Run each customer's monthly service review and follow through on actions
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences
• Take on-call responsibilities once established (9-12 months into the role)

Requirements

• Hands-on SOC experience, or a strong sysadmin background moving into security
• SIEM experience, ideally Microsoft Sentinel, CrowdStrike Falcon / NG-SIEM, or Rapid7 InsightIDR
• Clear, confident communication, and comfort leading customer conversations
• A curious, investigative mindset with an eye for what looks wrong
• Ability to work independently early on; this is not a graduate role
• AU / NZ citizenship preferred

Nice to have:

• KQL and detection tuning experience

Important Details

• Schedule: Triage is capped at 20 hours per week (usually 15); the rest of the time is dedicated to customers, training, vendor updates, and team meetings
• Work format: hybrid, two days a week in the office

About the Company

Our client is an established MSSP operating across Australia and New Zealand, with an analyst team of more than 35 people in the region.