SOC Analyst L2

Join to apply for the SOC Analyst L2 role at Black Box Join to apply for the SOC Analyst L2 role at Black Box Act as the primary point of contact for incident escalations from Tier 1/2 analysts. Act as technical contributor during major security incidents contributing to improvement in the team’s capability. Lead the investigation and response to security incidents, leveraging advanced technical skills and threat intelligence. Triage security alerts, perform in-depth analysis to determine root cause and impact, and develop effective containment and remediation strategies. Develop and execute incident response plans, ensuring proper communication and documentation throughout the incident lifecycle. Work in a ‘business hours + rostered on-call’ environment Utilize SIEM (Security Information and Event Management) and other security tools to identify and analyze potential threats. Develop and fine-tune security rules and correlation logic to improve threat detection capabilities. Maintain detailed documentation of security incidents, investigations, and response actions. ResponsibilitiesJOB DESCRIPTIONAct as the primary point of contact for incident escalations from Tier 1/2 analysts. Act as technical contributor during major security incidents contributing to improvement in the team’s capability. Lead the investigation and response to security incidents, leveraging advanced technical skills and threat intelligence. Triage security alerts, perform in-depth analysis to determine root cause and impact, and develop effective containment and remediation strategies. Develop and execute incident response plans, ensuring proper communication and documentation throughout the incident lifecycle. Work in a ‘business hours + rostered on-call’ environment Utilize SIEM (Security Information and Event Management) and other security tools to identify and analyze potential threats. Develop and fine-tune security rules and correlation logic to improve threat detection capabilities. Maintain detailed documentation of security incidents, investigations, and response actions. Requirements5-7 years of experience in a SOC or security analyst role. Proven track record of successfully identifying, analyzing, and responding to security incidents. Strong background in formulation and execution of threat hunt scenarios and the development of subsequent use cases to uplift detection capability. Experience working on any of the scripting languages such as Python etc. Relevant industry certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), or CompTIA Security or Vendor certs are highly desirable. In-depth knowledge of Sentinel, Splunk, CrowdStrike, Securonix, LogRhythm, Rapid7 MS Defender, other Threat centric tools, IDS/IPS, email security, vulnerability scanners and other security technologies. Detection and mitigation strategies for a broad range of cyber threats, including malware, DDOS, hacking, phishing, lateral movement and data exfiltration. Seniority level Seniority level Mid-Senior level Employment type Employment type Full-time Job function Job function Information Technology Industries IT Services and IT Consulting Referrals increase your chances of interviewing at Black Box by 2x Get notified about new Security Operations Center Analyst jobs in Sydney, New South Wales, Australia . Sydney, New South Wales, Australia 5 days ago Sydney, New South Wales, Australia 2 days ago Millers Point, New South Wales, Australia 5 days ago Cremorne, New South Wales, Australia 2 weeks ago Sydney, New South Wales, Australia 2 weeks ago Sydney, New South Wales, Australia A$50.00-A$60.00 2 days ago Sydney, New South Wales, Australia A$120.00-A$130.00 5 days ago Sydney, New South Wales, Australia A$100.00-A$160.00 5 days ago Cyber Security Advice and Assessment Specialist Sydney, New South Wales, Australia 2 weeks ago Sydney, New South Wales, Australia 3 weeks ago Sydney, New South Wales, Australia 2 weeks ago Vice President, Insider Threat Investigations, Global Information Security, Australia Security Engineer, Incident Response, SIRT Sydney, New South Wales, Australia 6 days ago Technical Business Analyst - Cyber Security Sydney, New South Wales, Australia 2 days ago Security Engineer, Incident Response, SIRT Sydney, New South Wales, Australia 2 weeks ago Rhodes, New South Wales, Australia 5 days ago Artarmon, New South Wales, Australia 1 month ago Sydney, New South Wales, Australia 3 weeks ago Sydney, New South Wales, Australia 2 weeks ago Security Engineer - Red Team (Open to remote across ANZ) Sydney, New South Wales, Australia 3 weeks ago Sydney, New South Wales, Australia 5 days ago Millers Point, New South Wales, Australia 19 hours ago Sydney, New South Wales, Australia 3 hours ago Digital Intern - Cybersecurity and Digital Services Homebush, New South Wales, Australia 1 day ago Network Security Engineer - F5 / Palo Alto Sydney, New South Wales, Australia A$130,000.00-A$140,000.00 1 day ago Cloud Networking and Cyber Graduate Program - Night Shift SOC Support Engineer, AWS SOC Security Support Engineer Sydney, New South Wales, Australia 2 weeks ago We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr