Senior Security Operations Centre (SOC) Analyst

About the Company

Fujitsu is a global leader in technology and business solutions, dedicated to enhancing lives through innovation and expertise. The company contributes continuously to societal growth and client success worldwide.

Role Overview

We are seeking a skilled Senior Security Operations Centre (SOC) Analyst to join our team in Auckland, Wellington, or Canberra. This hands-on senior role involves advanced monitoring, investigation, triage, and incident coordination for managed customer environments. The position operates within a rotating 24/7 schedule including day, evening, overnight, weekend, and public holiday shifts.

Core Responsibilities

• Conduct advanced analysis and investigation of security alerts, incidents, and suspicious activities across client systems.
• Serve as the senior technical escalation contact during shifts, validating complex or high-severity cases to ensure timely and evidence-supported decisions.
• Correlate evidence across multiple data sources such as endpoint, identity, cloud, network, authentication, and application environments to assess incident scope and attacker techniques.
• Coordinate incident scoping and response in accordance with approved customer procedures and escalation protocols.
• Review and provide constructive feedback on escalated investigations, tickets, reports, and recommended responses.
• Participate in incident reviews to extract lessons learned and contribute improvements to processes, playbooks, and detection mechanisms.
• Provide technical leadership and mentorship during assigned shifts, supporting analysts in decision-making and maintaining case ownership.
• Ensure thorough and accurate documentation of investigations, shift logs, handovers, and customer communications.
• Lead structured shift handovers to guarantee active incidents are clearly assigned with defined status and next steps.
• Engage with customers when senior analytical insight or explanation of incidents is needed, and contribute to reporting and service reviews.
• Offer evidence-driven recommendations on repeating risks, telemetry gaps, and detection quality improvements.
• Collaborate with Advanced Cyber Intelligence and Response Team (ACIRT) to enhance detection use cases, playbooks, enrichment, and response procedures.
• Identify recurring operational challenges and suggest practical enhancements in automation, detection logic, and case workflow.
• Partner with specialist cyber teams when investigations or service improvements require extra expertise.

Mandatory Requirements

• Proven experience within a Security Operations Centre, managed security service, incident response, or comparable operational security role, specifically at a senior or Tier 2 escalation level.
• Capable of independently managing complex investigations, evaluating severity, impact, and determining appropriate escalations.
• Strong analytical skills with proficiency in SIEM, EDR, or XDR technologies, and practical knowledge of endpoint, identity, cloud, network, and application security events.
• Experience leading or coordinating work during shifts or critical investigations, including mentoring and quality assurance.
• Excellent verbal and written communication skills, with experience providing customer-facing updates and maintaining disciplined documentation.
• Mandatory Australian or New Zealand citizenship and holding or able to reinstate AGSVA NV1 or equivalent New Zealand security clearance.
• Ability and willingness to work within a rotating roster covering days, evenings, nights, weekends, and public holidays.

Preferred Qualifications

• Practical experience using Microsoft Sentinel, including incident investigations and Kusto Query Language.
• Working knowledge of CrowdStrike Falcon for endpoint detection and response.
• Familiarity with SOAR platforms, case management, or ServiceNow SecOps.
• Experience optimizing detection rules, playbooks, or identifying telemetry and coverage deficiencies.
• Understanding of MITRE ATT&CK or similar adversary behavior frameworks.
• Relevant certifications from Microsoft, CrowdStrike, or other industry bodies are advantageous.

Additional Information

Relocation assistance or visa sponsorship is not available for this role. We embrace diversity, equity, and inclusion, encouraging applications from a broad range of backgrounds including women, gender-diverse individuals, Indigenous peoples, LGBTI+ community members, people with disabilities, veterans, and culturally diverse applicants.

Applicants must be Australian/New Zealand citizens able to obtain or hold required security clearances due to compliance with government regulations regarding access to controlled technology. Exceptions might apply for certain citizenship backgrounds as per specified legal instruments.

Recruitment agencies are not engaged unless under specific agreements; unsolicited submissions will not be accepted or compensated.