Security Operations Centre (SOC) Senior Analyst

Halcyon Knights; Brisbane; Hybrid; AUD 113,000 - 121,000; Full time

Benefits offered by this job

Free onsite parking

Job summary

Halcyon Knights in Brisbane is seeking a Senior SOC Analyst to operate and mature the Security Operations Centre on a 12-month contract with potential extensions. You will monitor, investigate, and respond to cyber incidents while driving continual improvement alongside a MSP partner.

The role focuses on MSP governance, SIEM optimization, detection engineering, and proactive threat hunting, with 50% WFH flexibility and on-site Brisbane presence required.

Qualifications

• Proven experience managing or overseeing external IT/cyber MSPs.
• Deep expertise in SIEM management, use-case engineering and log onboarding.
• Strong incident response capabilities using IOCs and TTPs.
• Proactive threat hunting and continuous improvement mindset.
• Excellent communication with internal teams and government units.

Responsibilities

• MSP governance to ensure delivery aligns with SLAs and security requirements.
• SIEM optimization, log onboarding and health checks.
• Develop detection use cases and improve logging gaps.
• Lead incident response and investigations with contextual data.
• Conduct proactive threat hunting and drive SOC improvements.
• Collaborate with QGCSU and internal stakeholders.

Skills

MSP governance

SIEM management

Incident response

Threat hunting

Stakeholder collaboration

Job description

Security Operations Centre (SOC) Senior Analyst

Senior Security Operations Centre (SOC) Analyst

• Rate: $82 to $88/hour (depending on skills and experience, plus superannuation)
• Duration: 12-month contract (with view to extend)
• Location: Carseldine, Brisbane (No fully remote options available)
• Work Arrangement: 50% Work from Home (WFH) flexibility
• Perks: Free onsite parking
• Position Type: Contract (includes a 1-in-6-week on-call rotation)

About the Role

Join a prominent QLD Government department within their Information Technology Branch as a Senior SOC Analyst on an initial 12-month contract, with strong potential for further extensions. You will play a pivotal role in operating and maturing the department's Security Operations Centre. Working alongside a Managed Service Provider (MSP), you will monitor, identify, investigate, and respond to cyber security incidents, while leading continual improvement initiatives to ensure a fit-for-purpose SOC.

Key Responsibilities

• MSP Governance: Provide technical and governance oversight of the MSP, ensuring delivery aligns with contractual obligations, SLAs, security requirements, and government governance frameworks.
• SIEM Optimization: Review and uplift SIEM processes, including log source onboarding, health checks, and operational procedures.
• Detection & Log Engineering: Collaborate with system owners and the MSP to eliminate logging gaps and improve detection rules and use cases.
• Incident Response & Analysis: Investigate threats and enrich investigations using contextual data, Indicators of Compromise (IOCs), and attacker Tactics, Techniques, and Procedures (TTPs).
• Proactive Threat Hunting: Conduct and review targeted threat hunting activities in response to emerging cyber threats.
• Stakeholder Collaboration: Partner closely with internal teams and the Queensland Government Cyber Security Unit (QGCSU) for incident resolution and reporting.

About You

We are looking for a technical leader with a strong background in modern SOC operations and a knack for vendor governance. Your pay rate within the offered bracket will be determined based on the depth of your technical and governance expertise. To be successful, your application should clearly demonstrate:

• Proven experience managing or providing oversight to external IT/Cyber Security Managed Service Providers (MSPs).
• Deep technical expertise in SIEM management, engineering use cases, and log onboarding.
• Strong incident response capabilities, utilizing IOCs and TTP frameworks to investigate complex threats.
• Proactive threat hunting experience and a continuous improvement mindset.
• Exceptional communication skills to collaborate with internal stakeholders and broader government security units (like QGCSU).

Requirements & Eligibility

• Location: Candidates must be local to the Brisbane area to support the partial onsite requirement (50% WFH). Fully remote applications will not be considered.
• On-Call: This role requires mandatory participation in an on-call roster (currently one week in six).
• Vetting: The successful candidate will be required to undergo a mandatory criminal history check prior to commencement.