About Systima
Systima is a well-established Managed Service Provider with offices in Collingwood, Melbourne and Alexandria, Sydney, supporting small, medium and enterprise clients across Australia. This role sits within one of our dedicated Support Services pods, with particular ownership of a financially regulated client account where compliance and security expectations run higher than usual.
About the Role
We are looking for an experienced SOC Analyst to join our NOC and SOC team. You will monitor, triage and respond to security alerts across our managed client base, lead incident containment and escalation, and help mature our detection and response capability.
This is not an entry level role. We need someone who already has hands on SOC experience and can walk straight into live incident response, including speaking directly with clients while an incident is still unfolding.
What You Will Be Doing
- Monitor and triage security alerts across our endpoint detection and response tooling
- Lead initial incident response for confirmed security events, including containment actions and escalation
- Act as a client facing point of contact during security incidents, explaining what happened, what we are doing about it and what happens next in plain language
- Tune and improve detection rules and alert thresholds to reduce false positive load
- Partner with our technical escalation and infrastructure teams on vulnerability and patch management oversight
- Maintain SOC runbooks, escalation matrices and incident documentation to a consistent standard
- Participate in an after hours, on call SOC escalation roster
- Contribute to maturing our SOC function as it scales
What You Will Bring
- Solid networking fundamentals, including routing, firewalls, VPN and network segmentation, to accurately interpret alert context such as lateral movement or firewall and VPN log correlation. This is essential
- Hands on experience in a SOC, security operations or MDR adjacent role, ideally within an MSP or multi tenant managed security environment
- Demonstrated incident response experience, from triage through to containment, not just alert acknowledgement
- Strong working knowledge of EDR and XDR tooling, or directly transferable equivalents
- Working understanding of Microsoft 365, Azure and Entra ID security configuration
- Familiarity with the ACSC Essential Eight and how SOC activity maps to it
- A confident, client facing communicator, comfortable leading live conversations with clients during active security incidents and staying composed under pressure
- Able to operate independently on shift with minimal real time supervision
Nice to Have
- Formal incident management experience, for example ITIL incident or major incident management, combined with client facing communication skills
- Experience with managed detection and response partner escalation models
- Exposure to regulated industry clients and associated compliance monitoring
- Security certifications such as Security+, SC-200 or GCIH, or clearly demonstrable equivalent on the job depth
What We Offer
- Competitive salary, reviewed annually
- Hybrid working from our Collingwood office
- Funded certifications and dedicated training time
- Genuine ownership over how our SOC function is run and matured, not inheriting someone else's process
- A clear growth path as the security function scales, including senior analyst, infrastructure and team leadership tracks
- A business that documents things properly and treats security as a service, not a checkbox
#J-18808-Ljbffr
SOC Analyst (MSP) - Melbourne employer: Systima
Systima is an exceptional employer that prioritises employee growth and development, offering a dynamic work culture where hands-on client-facing experiences are at the forefront. Located in Alexandria, Sydney, we provide our team with comprehensive training opportunities and a supportive environment that fosters collaboration and innovation, making it an ideal place for those looking to advance their careers in the MSP sector.
