L1/L2 SOC Analyst Retainer Role
Budget / SalaryA$750–800
TypeFreelance project
LocationRemote
Posted1 hour ago
Vigilense AI is looking for an L1/L2 SOC Analyst on a monthly retainer.
We are an AI driven SOC platform for small and medium businesses, delivered through MSPs. You would be monitoring security alerts for 3 to 4 client environments. These are small, steady environments, not a busy queue, so this suits someone who wants consistent ongoing work without the chaos of a large SOC.
Location: Our team and clients are based in Australia (AEST/AEDT). We prefer freelancers based in the Philippines or Malaysia, as the time difference is small and your shift will line up well with Australian business hours.
What you'll do:
Triage and investigate alerts (L1) and escalate or dig deeper into real incidents (L2)
Separate false positives from genuine threats and document your reasoning
Write clear incident reports and regular summary reports that a non technical client can understand
Work with our team on tuning detections and improving playbooks
What we're looking for:
Hands on SOC experience at L1/L2 level
Familiarity with SIEM/EDR tools (Microsoft Defender, Sentinel, Wazuh or similar)
Strong written English and good reporting skills, this matters a lot to us
Reliable, responsive and comfortable working independently
Arrangement:
Shift of 7 to 8 hours per day, aligned to Australian business hours
Retainer of 800 AUD per month
Long term ongoing role for the right person
Please answer these questions in your proposal (bids without answers won't be considered):
1. Where are you based, and which hours can you work in Australian time (AEST)?
2. How many years have you worked in a SOC, and was it at L1, L2 or both?
3. Which SIEM, EDR and ticketing tools have you used hands on?
4. Are you currently working for another SOC, MSSP or client? If so, how many hours a day does that take?
5. Describe a real incident you investigated: what triggered it, what you found and how it was resolved.
6. Have you written incident reports or monthly summaries for clients? Please attach a sample with anything sensitive removed.
7. Do you hold any security certifications (e.g. Security+, CySA+, BTL1, SC-200)?
We are an AI driven SOC platform for small and medium businesses, delivered through MSPs. You would be monitoring security alerts for 3 to 4 client environments. These are small, steady environments, not a busy queue, so this suits someone who wants consistent ongoing work without the chaos of a large SOC.
Location: Our team and clients are based in Australia (AEST/AEDT). We prefer freelancers based in the Philippines or Malaysia, as the time difference is small and your shift will line up well with Australian business hours.
What you'll do:
Triage and investigate alerts (L1) and escalate or dig deeper into real incidents (L2)
Separate false positives from genuine threats and document your reasoning
Write clear incident reports and regular summary reports that a non technical client can understand
Work with our team on tuning detections and improving playbooks
What we're looking for:
Hands on SOC experience at L1/L2 level
Familiarity with SIEM/EDR tools (Microsoft Defender, Sentinel, Wazuh or similar)
Strong written English and good reporting skills, this matters a lot to us
Reliable, responsive and comfortable working independently
Arrangement:
Shift of 7 to 8 hours per day, aligned to Australian business hours
Retainer of 800 AUD per month
Long term ongoing role for the right person
Please answer these questions in your proposal (bids without answers won't be considered):
1. Where are you based, and which hours can you work in Australian time (AEST)?
2. How many years have you worked in a SOC, and was it at L1, L2 or both?
3. Which SIEM, EDR and ticketing tools have you used hands on?
4. Are you currently working for another SOC, MSSP or client? If so, how many hours a day does that take?
5. Describe a real incident you investigated: what triggered it, what you found and how it was resolved.
6. Have you written incident reports or monthly summaries for clients? Please attach a sample with anything sensitive removed.
7. Do you hold any security certifications (e.g. Security+, CySA+, BTL1, SC-200)?
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.