Onshore Level 2 SOC lead and escalation point for a managed SOC. 5+ years in cyber, with Sentinel, Defender XDR and CrowdStrike. Visa holders with full working rights welcome. Location – Melbourne.
Job Description
WHAT YOU BRING
- 5+ years in cyber, 3+ years in a SOC and 2+ years at Level 2 or above
- Deep Microsoft Sentinel and Defender XDR experience
- Deep CrowdStrike Falcon experience: Insight, RTR, Next-Gen SIEM and Fusion
- Advanced KQL and CQL
- Experience leading real-world IR: ransomware, BEC and credential compromise
- MSSP or multi-client SOC experience (preferred)
- SC-200 plus a current CrowdStrike Falcon certification
NICE TO HAVE
- GIAC, BTL1/2, CySA+, OSCP or CISSP
- Forensics and malware analysis
- Splunk, Elastic, QRadar or Cortex XSOAR
- PowerShell or Python
ELIGIBILITY
Australian citizens, Permanent Residents and holders of any Australian visa with full working rights are welcome to apply.
Job Category: 3+ in a SOCDefender XDRCrowdStrike FalconKQL / CQL* Onshore technical lead and L2 escalation point for a managed SOC * 5+ years in cyber2+ at L2 * Sentinel
Job Type: Permanent
Job Location: Australia
Experience: 5+ years in cyber
