SOC Analyst - Wgtn or Akld

We are seeking an experienced cyber security Analyst who is already working in a SOC team. You will bring 1.5 years cyber experience and a desire to grow your skills and expertise within a global consultancy.

As an active member of the SOC triage shift roster, you will have a 3-hour assigned triage within your normal 8 hour working day, with the remaining 5 hours to be self-managed.

(this is not a graduate role, and experience must be from paid permanent employment, not study or home labs)

The role

Our SOC Analysts support an exciting range of customers across New Zealand and afar, from small kiwi-owned businesses to well-known public sector organisations.

The main responsibilities of the role are:

• Supporting the implementation, management, and operation of our security solutions and the Managed Security service.

• Communicating with our clients.

• Working on a range of internal and customer security environments.

• Interfacing with other security teams such as DFIR, threat research, security engineering to support investigations.

• Support our teams with presales engagements and cross selling of Managed Security Services.

• Contribute to the upkeep of our processes and procedures.

Who we’re looking for

You consider yourself to be the best analyst in your organisation, are results orientated, and add value to the clients you work with. You are already based in New Zealand, with a valid work visa or permanent right to work.

These are the main skills and experience we’re looking for:

• Have a minimum of 1.5 years paid permanent work experience in security operations, penetration testing, or security engineering.

• Preferred experience as a Security Operations Analyst – Tier 1 or 2.

• Some experience reviewing, triaging and responding to detections from security solutions and other security tooling, in a commercial environment.

• Ability to configure and tune EDR solutions and other security tooling to reduce false positives.

• Exposure to at least one or more of the following: LogRhythm, Azure Sentinel, CrowdStrike Falcon, Microsoft Defender Extended Detection and Response.

• Foundational and technical knowledge in security, web technologies, networking, and cloud infrastructure.

• Exposure to working with service level agreements and proudly meeting their expectations.

• Some experience in programming/ scripting languages preferred.

• Some experience in automation/ automation first mindset preferred.

Due to the nature of our work, this role requires a clean criminal record. Successful applicants will be required to complete a criminal record check during the onboarding process.

Benefits of working for Bastion

You will work alongside a diverse group of people who are dedicated to protecting others from cyber harm. The perks of being part of the Bastion team include:

• A collaborative, thoughtful team who do meaningful work and keep learning

• Supportive work environment, great team culture and regular social events

• Training budget, study time allowance, regular training sessions and internal mentor programme

• Competitive remuneration

• Half yearly bonus scheme

• Additional leave after 2 years

• Access to a gym within a short walk of the office.

About us

Bastion Security Group provides best-in-class cybersecurity services through a high-performance culture built on quality, excellence and collaboration. Our skilled and empowered team is dedicated to achieving meaningful security outcomes and delivering lasting value for our clients.

‘Assess & Improve’, ‘Detect & Respond’, ‘Protect & Secure’, ‘Advise & Empower’ and stay ahead of evolving threats.

We deliver security services across strategy, architecture, operations and compliance. Whether it’s advising on board-level risks, embedding into your teams, or responding to incidents, our experts provide actionable insight grounded in real threats and real solutions.

To learn more about our New Zealand operation, visit https://bastionsecurity.co.nz/.

Our Australian offices - https://www.cythera.com.au/; https://www.seamlessintelligence.com.au/; https://www.phronesissecurity.com/; https://www.astralas.com/

Apply today

If you have the desire to help us deliver excellence for our clients, we want to hear from you.

Apply now via Seek and yes, we do read your cover letter. We want to read about how joining our team will add value to your career path and why you decided to apply for our specific role.

Applications close 14th October 2026.

We'll be reviewing applications on an ongoing basis as they come in, and depending on application volume, may close the advert early. If this is your ideal next role, we'd encourage you to get in touch today!

For a confidential conversation, email careers at bastion security . co . nz