SOC Analyst

14 hours ago


Sydney, Australia Snow Software Full time

**Job Description**:
The SOC Analyst is responsible for monitoring and responding to the security events and risks of the business and documenting their research, triage, and mitigation efforts. They are expected to assess the effectiveness of detections, risk management controls, and policies used to prevent security threats. They are involved in the development of policies and detections and are encouraged to provide recommendations based on their analysis and engage in threat hunting exercises, penetration testing, and phishing campaign simulations.

The SOC Analyst will report to the SOC Lead and is an involved member of the Security Operations and Information Security Team. This role is expected to display familiarity of Cybersecurity best practices and frameworks (MITRE, ISO27001, SOC2), as well as being an active contributor to the continued maturation of current security tools and systems. As a SOC Analyst you are empowered to take the appropriate response actions to mitigate risks and remediate threats to Snow Software and our clients.

Key Responsibilities:

- Work in a 24x5 Security Operations environment, working primarily day shift
- Monitor SIEM, mailbox, and ticket requests; ensuring a timely response
- Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts
- Conducts proactive threat hunting and uses findings to recognize detection gaps
- Responsible for Security Incident Response actions and escalation of critical severity incidents
- Provides incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary
- Perform file analysis and digital forensics** **based on alerts received and in support of investigations
- Conduct maturity improvements for information security and cybersecurity tools and systems
- Conduct pen testing and vulnerability management exercises as well as red/blue team events
- Discuss and present major events and initiatives with SOC members during a daily handover session
- Maintain a strong awareness of the current threat landscape

**Qualifications**:

- Knowledge of and experience with SIEM/SOAR technology, and EDR tools
- Knowledge of and experience with Windows, MacOS, and Linux operating systems
- Proven experience of ability to analyze event logs and recognize signs of cyber intrusions/attacks
- Understanding of query languages and/or scripting languages
- Experience in a relevant field such as IT audit, risk management, penetration testing, red team/blue team, or as a security operations analyst
- Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
- Is a confident, energetic self-starter, with strong interpersonal skills

Additional qualifications
- Working knowledge with Kusto, SQL, or other query/programming languages
- Working knowledge with Azure Sentinel and Microsoft Defender
- 1-2 or more years working in a Security Operations Center, internally or with a service provider (MSSP)
- Experience in vulnerability analysis and remediation
- Experience with security tool implementation

**You must be able to provide evidence of Australian work rights.**

Additional Information

**Company Description**

Snow Software is the global leader in technology intelligence solutions, ensuring the trillions spent on all forms of technology is optimized to drive maximum value. More than 4,000 organizations around the world rely on Snow's platform to provide complete visibility, optimize usage and spend, and minimize regulatory risk. Headquartered in Stockholm, Snow has more local offices and regional support centers than any other software asset and cloud management provider, delivering unparalleled results to our customers and partners.

As an inclusive employer, Snow strives not discriminate on the grounds of age, disability, sex, sexual orientation, gender identity or expression, marriage, civil partnership, pregnancy, maternity, race (including colour and ethnic or national origins), religion, Veteran status or belief.

This is not just a generic ‘equal opportunities disclaimer’ for us - we are truly committed to creating a workplace where our team members thrive.

If you have a disability or special need that requires us to adjust the recruiting process, please do advise us when contacted.

LI-MC1


  • Soc Analyst

    2 weeks ago


    Sydney, New South Wales, Australia Genesis It&T Pty Ltd Full time

    **9 Months Contract (with the view to extend)**:- **Global Technology Company**:- **Experience in Healthcare industry is mandatory**A leading global technology company is currently seeking for an experienced SOC Analyst to be responsible for ensuring the detection and resolution of cyber security incidents, exposures, and vulnerabilities across all client...

  • SOC Analyst

    2 weeks ago


    Sydney Central Business District, Australia HAYS Full time

    Permanent SOC Analyst position for Leading Financial Services firm based in Sydney CBD Large Financial Services firm require a SOC Analyst with Your new company This financial services firm administers financial ownership data and drives user engagement through technology. We work together with our clients to deliver solutions and technology platforms...

  • SOC Analyst

    1 week ago


    Sydney, Australia Delivery Centric Technologies Full time

    **Job Title: SOC Monitoring and Incident Response Analyst** **Location: Sydney** **Experience & Qualifications**: - Need to append EDR experience / exposure and strong understanding of the threat landscape to the below JD. - Hands-on experience working in a Security Operations Center (SOC) environment, with a strong focus on incident monitoring, triage,...

  • SOC Analyst

    1 week ago


    Sydney, New South Wales, Australia Delivery Centric Pty Ltd Full time $104,000 - $130,878 per year

    At Delivery Centric, we are committed to helping enterprises stay ahead in the ever-evolving cybersecurity landscape. We are looking for a highly skilled SOC Monitoring and Incident Response Analyst to join our security team. This role will involve detecting, analyzing, and responding to complex cyber threats in real time, ensuring critical systems and data...

  • SOC Analyst

    1 week ago


    Sydney, New South Wales, Australia Delivery Centric Full time $104,000 - $130,878 per year

    Job Title: SOC Monitoring and Incident Response AnalystLocation: SydneyExperience & Qualifications:Need to append EDR experience / exposure and strong understanding of the threat landscape to the below JD.Hands-on experience working in a Security Operations Center (SOC) environment, with a strong focus on incident monitoring, triage, and response.Preferred...

  • SOC Analyst

    1 week ago


    Sydney, Australia Fujitsu Full time

    **We are Fujitsu** We use technology to make happier lives. We are a global leader in technology and business solutions that transform organisations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers. **About the role** We are looking for an...

  • Soc Analyst L2

    3 weeks ago


    Sydney, New South Wales, Australia Buscojobs Full time

    Join to apply for the SOC Analyst L2 role at Black Box.ResponsibilitiesAct as the primary point of contact for incident escalations from Tier 1 / 2 analysts.Act as a technical contributor during major security incidents, improving the team's capabilities.Lead investigations and responses to security incidents, leveraging advanced technical skills and threat...

  • SOC Monitoring

    2 weeks ago


    Sydney, New South Wales, Australia ALOIS Solutions Full time $104,000 - $130,878 per year

    Role: SOC Monitoring & Incident Response AnalystDuration:3+ months (Possibility of extension)Location:SydneyDescription:BelowExperience:5+ YearsJob description: SOC Monitoring & Incident Response AnalystExperience & Qualifications:We need to append EDR experience / exposure and strong understanding of the threat landscape to the below JD.Experience: Minimum...

  • Soc Analyst L2

    4 weeks ago


    Sydney, New South Wales, Australia Buscojobs Full time

    Join to apply for the SOC Analyst L2 role at Black Box.ResponsibilitiesAct as the primary point of contact for incident escalations from Tier 1 / 2 analysts.Act as a technical contributor during major security incidents, improving the team's capabilities.Lead investigations and responses to security incidents, leveraging advanced technical skills and threat...

  • SOC Monitoring

    1 week ago


    Sydney, New South Wales, Australia Ayan Infotech Full time

    OverviewAyan Infotech are looking for multiple SOC Monitoring & Incident Response Analysts for a long term contract job opportunity in Sydney. All applicants must have full unrestricted work rights in Australia.RoleTitle: SOC Monitoring & Incident Response Analysts (multiple positions)Location: SydneyType: Contract (6 months +)Nature of work:...