SOC Analyst
Summary
SOC Analyst at an MSSP serving AU/NZ, based in Wellington on a permanent hybrid basis (2 days/week in office). Day to day: triaging and investigating alerts in Microsoft Sentinel, Rapid7 and CrowdStrike NG-SIEM, tuning detections, and acting as named analyst for your own MDR customers with monthly service reviews; on-call starts after 9-12 months.
Our client is an established MSSP operating across Australia and New Zealand. Their customer base is growing fast, and so is the analyst team behind it, now more than 35 people in region.
They have an immediate need for a SOC Analyst in Wellington, on a permanent hybrid basis, two days a week in the office.
What sets this SOC apart is how the work is structured. Triage is capped at 20 hours a week (usually 15). The rest of your time goes to your own customers, training, vendor updates and team meetings.
Senior analysts mentor the team. Peers back each other up rather than handing work up a chain.
The role
Triage and investigate alerts across Sentinel, Rapid7 and CrowdStrike NG-SIEM; tune detections to cut noise
Be the named analyst and service advisor for your own MDR customers
Run each customer's monthly service review and follow through on actions
Deliver Service Requests and security advice, presenting to technical and non-technical audiences
On-call responsibilities once established, 9-12 months in
What you'll need to succeed;
Hands-on SOC experience, or a strong sysadmin background moving into security
SIEM experience, ideally Microsoft Sentinel, CrowdStrike Falcon / NG-SIEM or Rapid7 InsightIDR
KQL and detection tuning experience is a strong advantage
Clear, confident communication, and comfort leading customer conversations
A curious, investigative mindset with an eye for what looks wrong
Ability to work independently early on; this is not a graduate role
AU / NZ citizenship preferred
Suitably skilled candidates are encouraged to apply with an achievement-based CV.