L1/L2 SOC Analyst Retainer Role

Vigilense AI is looking for an L1/L2 SOC Analyst on a monthly retainer.

We are an AI driven SOC platform for small and medium businesses, delivered through MSPs. You would be monitoring security alerts for 3 to 4 client environments. These are small, steady environments, not a busy queue, so this suits someone who wants consistent ongoing work without the chaos of a large SOC.

Location: Our team and clients are based in Australia (AEST/AEDT). We prefer freelancers based in the Philippines or Malaysia, as the time difference is small and your shift will line up well with Australian business hours.

What you'll do:
Triage and investigate alerts (L1) and escalate or dig deeper into real incidents (L2)
Separate false positives from genuine threats and document your reasoning
Write clear incident reports and regular summary reports that a non technical client can understand
Work with our team on tuning detections and improving playbooks

What we're looking for:
Hands on SOC experience at L1/L2 level
Familiarity with SIEM/EDR tools (Microsoft Defender, Sentinel, Wazuh or similar)
Strong written English and good reporting skills, this matters a lot to us
Reliable, responsive and comfortable working independently

Arrangement:
Shift of 7 to 8 hours per day, aligned to Australian business hours
Retainer of 800 AUD per month
Long term ongoing role for the right person

Please answer these questions in your proposal (bids without answers won't be considered):
1. Where are you based, and which hours can you work in Australian time (AEST)?
2. How many years have you worked in a SOC, and was it at L1, L2 or both?
3. Which SIEM, EDR and ticketing tools have you used hands on?
4. Are you currently working for another SOC, MSSP or client? If so, how many hours a day does that take?
5. Describe a real incident you investigated: what triggered it, what you found and how it was resolved.
6. Have you written incident reports or monthly summaries for clients? Please attach a sample with anything sensitive removed.
7. Do you hold any security certifications (e.g. Security+, CySA+, BTL1, SC-200)?

---
來源：Freelancer.com | 出價次數：13 | 剩餘時間：6 日 | 專案類型：固定預算