Cyber Security Operations Analyst (SOC / Threat Detection)

Key Responsibilities & Deliverables

• Triage and investigate alerts generated by SIEM and EDR platforms (Splunk, CrowdStrike, Microsoft Sentinel).
• Conduct triage, containment, and eradication for security incidents following Australian standard playbooks.
• Assist in the operationalisation of ACSC Essential Eight mitigation strategies across client endpoints and cloud environments.
• Participate in threat hunting exercises and threat intelligence correlation.

Candidate Requirements & Vetting Criteria

• 3+ years experience in a Security Operations Centre (SOC) or security engineering role in Australia.
• Strong understanding of network protocols, operating system internals, and MITRE ATT&CK framework.
• Relevant industry certifications (Security+, CySA+, CEH, or GIAC) preferred.
• Must hold or be eligible to obtain an Australian Government Security Clearance (NV1 preferred).

Target Competencies & Skill Matrix

Remuneration Package & Benefits