Security Operations Engineer — SOC & Automation

Brennan; Sydney; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Training bonuses

Culture Awards

Brennan Daredevils trip

Social activities

Hardware discounts

Learning & development

Job summary

Brennan is seeking a Security Operations Engineer (L2) to join its Cyber Security team in Australia. The role sits in the Security Operations Centre, balancing incident response with security platform engineering.

You will onboard customers, configure security platforms, and build automations while acting as an escalation point for analysts. The position requires Australian citizenship and NV1 clearance eligibility, with a hybrid pattern (3 days in office).

Qualifications

• Australian citizenship required and NV1 security clearance eligibility.
• 2–3+ years in a SOC or related security role.
• Experience investigating and responding to security incidents.
• Strong troubleshooting and analytical skills.
• Experience with SIEM, SOAR, endpoint security and identity management.
• Excellent communication with technical and non‑technical stakeholders.
• Experience in operational support or managed services environments.
• Ability to work in a fast-paced team.
• Proactive learning and collaboration.

Responsibilities

• Act as an escalation point for Security Analysts and investigate incidents.
• Perform root cause analysis and troubleshooting across security tech.
• Configure, administer and optimise SIEM, SOAR, endpoint, identity tools.
• Onboard and transition customers onto managed security services.
• Build and maintain security automations and runbooks.
• Support cloud and identity security controls across platforms.
• Create runbooks and technical documentation.
• Collaborate with customers and internal teams for outcomes.
• Support platform upgrades, testing and continuous improvement.
• Participate in SOC on-call roster.

Skills

SOC experience

Incident response

Troubleshooting

SIEM/SOAR

Endpoint security

Identity management

Stakeholder comms

Operational support

Team collaboration

PowerShell

Python

Cloud security

Tools

Microsoft Sentinel

Microsoft Defender XDR

Securonix

SentinelOne

CrowdStrike

Mimecast

Check Point Harmony

Entra ID

Azure security

AWS security

PowerShell

Python

Job description

Brennan is seeking a Security Operations Engineer (L2) to join its Cyber Security team in Australia. The role sits in the Security Operations Centre, balancing incident response with security platform engineering.

You will onboard customers, configure security platforms, and build automations while acting as an escalation point for analysts. The position requires Australian citizenship and NV1 clearance eligibility, with a hybrid pattern (3 days in office).