SOC Analyst

Our client is an established MSSP operating across Australia and New Zealand. Their customer base is growing fast, and so is the analyst team behind it, now more than 35 people in region.

They have an immediate need for a SOC Analyst in Wellington, on a permanent hybrid basis, two days a week in the office.

What sets this SOC apart is how the work is structured. Triage is capped at 20 hours a week (usually 15). The rest of your time goes to your own customers, training, vendor updates and team meetings.

Senior analysts mentor the team. Peers back each other up rather than handing work up a chain.

The role

• Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise
• Be the named analyst and service advisor for your own MDR customers
• Run each customer's monthly service review and follow through on actions
• Deliver Service Requests and security advice, presenting to technical and non-technical audiences
• On-call responsibilities once established, 9-12 months in

What you'll need to succeed;

• Hands-on SOC experience, or a strong sysadmin background moving into security
• SIEM experience, ideally Microsoft Sentinel, CrowdStrike Falcon / NG-SIEM or Rapid7 InsightIDR
• KQL and detection tuning experience is a strong advantage
• Clear, confident communication, and comfort leading customer conversations
• A curious, investigative mindset with an eye for what looks wrong
• Ability to work independently early on; this is not a graduate role
• AU / NZ citizenship preferred

Suitably skilled candidates are encouraged to apply with an achievement-based CV.