SOC Analyst

The company

We support about 60 local businesses, most within 30 minutes of the office. Every tech does a bit of everything, from printer jams to firewall rules.

This role opened up after a team member moved internally. Thatcher is hiring for the SOC Analyst role to monitor, investigate and respond to security alerts across our environment. Remote, open to candidates across Australia. We use Slack, Notion and Google Meet. Cameras on for team calls.

In this role you will

• Document incidents with timeline, impact and root cause.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Help with user access reviews and offboarding audits.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Check threat intelligence feeds and IOCs against our environment.
• Report on security awareness training and phishing simulation results.
• Write and update SOC runbooks and playbooks.

Who you are

• 2+ years in an SOC, security analyst or IT security role.
• Basic scripting in PowerShell or Python.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Clear written communication for incident tickets and reports.
• Working knowledge of SIEM and EDR tools.

Preferred

• KQL or SPL query writing.
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)

Schedule: Second shift, 2:00 PM to 10:30 PM, Monday to Friday

What we offer

• Superannuation on top of salary.
• 17.5% leave loading.
• Annual bonus.
• Flexible hours.
• Above-award pay rates.
• Paid parental leave.
• Employee assistance program.

Aboriginal and Torres Strait Islander people are encouraged to apply.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Thatcher Pty Ltd.