SOC Analyst L1

About Us

Intalock is Australia’s leading provider of cyber security managed services. They pride themselves on being uniquely different. Not only do they deliver world-class cyber security managed services, but they also have a wealth of experience in understanding data—the lifeblood of any organisation. As a cyber security provider, they believe that good security isn’t just about building higher walls around companies, which takes a lot of time, money, and resources. This approach isn’t effective or sustainable. At Intalock, they take a different approach: they want to understand your data, its sensitivity, how you use, store, and share it. In fact, they aim to understand everything about it. By doing this, they help their clients build and manage innovative solutions to reduce risk, taking a strategic, data-centric approach to cyber security.

Job Description

The successful candidate will be part of a team of skilled cyber security analysts who will deliver specialist cyber security capabilities to contracted clients. This includes several security logging, security monitoring, and security operations services, all designed to detect external and internal cyber-attacks on the client’s IT and network infrastructure.

Responsibilities

• Deliver security-based operational support for Managed Service clients, in line with documented processes and timeframes.
  
• Receive and monitor events.
  
• Review the collected data and then triage the event according to SOC processes.
  
• Classify and prioritize incidents based on established criteria.
  
• Handle communication to a mix of technical and non-technical client audiences.
  
• Perform routine checks on security platforms and appliances.
  
• Raise support tickets and take ownership through to completion.
  
• Participate in open communication between team members.
  
• Additional tasks will be given as the individual grows their skills.
  

Requirements

Technical Knowledge

• Degree in computer science or equivalent.
  
• Familiar with network protocols (DNS, SMTP, HTTP).
  
• 1-5 years of IT experience.
  
• 1-2 years of cyber security experience.
  
• Knowledge of using a SIEM (Splunk, Rapid7 IDR, and Sentinel) is a plus.
  
• Knowledge of vulnerability management is a plus.
  
• Knowledge of anti-malware and endpoint detection and response tools is a plus.
  

Skills and Attitudes

• Willing to work in a 24x7 environment, including shift work or out-of-hours on-call arrangements.
  
• Commitment to continual improvement, education, personal development, and a willingness to learn.
  
• Strong troubleshooting skills and ability to manage issues through to resolution.
  
• Maintains strong attention to detail in high-pressure situations.
  
• Adaptable and flexible with the ability to multi-task.
  
• Ability to explain in written and spoken English.
  
• Must have Fiber Optic internet with at least 25 Mbps bandwidth
  
• Must have a backup desktop or laptop with the latest OS
  
• Must be able to work from Monday- Friday 6 AM-2 PM
  

Benefits