SOC Analyst

Company overview

Our client is a prestigious national service provider to the education sector in Australia. Pioneering advancements in cybersecurity. Building a state-of-the-art Security Operations Centre (SOC) to protect digital ecosystems. Innovators in the cybersecurity domain.

‍

Job Purpose

Ensure security and integrity of the organisation's information systems. Continuously monitor, investigate, and escalate security incidents. Collaborate with SOC team members to develop detection rules and enhance processes. Act as primary contact for security incidents, utilising advanced tools to respond to threats.

‍

Responsibilities

• Monitor, investigate, and escalate security incidents as necessary.
• Identify and analyse intrusion attempts, providing mitigation strategies.
• Develop high-confidence detection rules for suspicious events with SOC team.
• Use SOAR platform for case management and response playbooks.

‍

Requirements

• Minimum of one year in a SOC environment.
• Familiarity with SIEM, UEBA, and SOAR technologies (Demisto, Cortex XSOAR, Phantom preferred).
• Experience with EDR technologies (Defender ATP, CrowdStrike).
• Understanding of MITRE ATT&CK framework, Cyber Kill Chain, and practical networking experience.