Senior SOC Analyst

Decipher Bureau; Brisbane; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work up to 50% from home

Free onsite parking at Carseldine

On-call rotation ~1 week every 6

Job summary

Decipher Bureau in Australia is seeking a Senior SOC Analyst to support the day-to-day operation and ongoing development of the organisation's SOC. You will work with the MSP, internal teams and government security stakeholders to uplift SIEM, investigate incidents and drive SOC maturity.

You will review logging, strengthen detection, and lead threat hunting initiatives, while delivering governance over service providers and ensuring contractual and security requirements are met.

Qualifications

• Significant experience in Security Operations Centre (SOC) at Senior/L2/L3 level or technical lead.
• Proven experience with Security Information and Event Management (SIEM) platforms and alert investigation.
• Experience reviewing and uplifting SIEM processes, log onboarding, detection engineering and use-case development.
• Proven ability to investigate and respond to cyber incidents from detection to remediation.
• Strong knowledge of threat hunting, IOCs and attacker TTPs.
• Familiarity with MITRE ATT&CK and its application to threat detection and response.
• Experience with MSSPs or outsourced SOC environments.
• Ability to provide technical oversight of external SOC providers and monitor service delivery.
• Strong analytical and communication skills for reporting and governance.

Responsibilities

• Provide governance oversight of MSP to ensure SOC services meet contractual, SLAs and security standards.
• Review and uplift SIEM processes to improve monitoring and detection capabilities.
• Oversee log source onboarding, health checks and visibility across environments.
• Collaborate with internal teams and MSP to address logging gaps and improve detection rules.
• Identify and implement continuous improvement to SOC capability and maturity.
• Monitor, investigate and respond to threats and incidents with proper documentation.
• Coordinate incident investigation, response and resolution with stakeholders.
• Enrich investigations using context, IOCs and TTPs.
• Engage with government stakeholders on incident escalation and reporting.
• Conduct proactive threat hunting in response to emerging threats.
• Assess SOC performance and opportunities to improve service delivery and response processes.
• Develop and refine SOC procedures and documentation.

Skills

SOC operations

SIEM platforms

Incident response

Threat hunting

MITRE ATT&CK

MSP governance

Stakeholder engagement

Documentation

Log management

Alert tuning

Tools

SIEM tools

Job description

Our client is a large public sector organisation operating within a complex technology environment, with a strong focus on strengthening its cyber security capabilities and protecting critical services. The organisation works closely with an external Managed Service Provider (MSP) to deliver its Security Operations Centre (SOC) services and is focused on improving security monitoring, incident response and overall SOC maturity.

The Role

As a Senior SOC Analyst, you'll play a key role in supporting the day-to-day operation and ongoing development of the organisation's SOC. Working closely with the MSP, internal technical teams and key government security stakeholders, you'll combine hands-on security operations with technical governance and service provider oversight. You'll be responsible for reviewing and uplifting SIEM processes, identifying logging and detection gaps, investigating cyber security incidents and driving initiatives to improve the effectiveness and maturity of SOC operations.

Key Responsibilities

• Provide technical and governance oversight of the Managed Service Provider (MSP), ensuring SOC services are delivered in accordance with contractual obligations, agreed service levels, security requirements, technical standards and operational procedures.
• Review, assess and uplift Security Information and Event Management (SIEM) processes to improve security monitoring and detection capabilities.
• Oversee log source onboarding, monitoring health checks and operational procedures to ensure appropriate visibility across the environment.
• Work closely with internal technical teams, system owners and the MSP to identify and address logging gaps and improve detection rules, alerting mechanisms and security use cases.
• Identify, prioritise and implement continuous improvement initiatives to strengthen SOC capability, operational efficiency and overall security maturity.
• Monitor, investigate and respond to cyber security threats and incidents, ensuring findings, follow-up actions and lessons learned are appropriately documented.
• Collaborate with internal technical teams and the MSP to coordinate incident investigation, response and resolution activities.
• Enrich security investigations through the analysis of contextual data, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).
• Work with relevant government cyber security stakeholders to support incident resolution, escalation and reporting.
• Conduct and review proactive threat hunting activities in response to emerging cyber security threats and intelligence.
• Assess SOC operational performance and identify opportunities to improve service delivery, monitoring effectiveness and incident response processes.
• Contribute to the development and refinement of SOC procedures, reporting and operational documentation.

What You'll Bring

• Significant experience working within a Security Operations Centre (SOC), ideally at a Senior SOC Analyst, L2/L3 Analyst or Technical Lead level.
• Demonstrated experience working with Security Information and Event Management (SIEM) platforms, including monitoring, log management and alert investigation.
• Experience reviewing and improving SIEM processes, including log source onboarding, detection engineering, alert tuning and development of security use cases.
• Proven experience investigating and responding to cyber security incidents, from initial detection through to containment, remediation and resolution.
• Strong understanding of threat hunting methodologies, threat intelligence, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).
• Familiarity with the MITRE ATT&CK framework and its application to threat detection, investigation and response.
• Experience working with Managed Security Service Providers (MSSPs) or outsourced SOC environments.
• Demonstrated ability to provide technical oversight of external SOC providers, including monitoring service delivery, operational performance and service level agreements.
• Experience identifying security monitoring gaps and implementing improvements to detection capabilities and SOC processes.
• Strong analytical and problem-solving skills, with the ability to investigate complex security events and communicate findings effectively.
• Excellent stakeholder engagement skills, with the ability to collaborate across internal technical teams, system owners, external providers and government stakeholders.
• Strong written communication skills, including the ability to document incidents, investigations, recommendations and lessons learned.
• A proactive approach to continuous improvement, with a genuine interest in strengthening SOC capability and operational maturity.
• Experience working within government or other large, complex enterprise environments will be highly regarded.

What's in It for You:

• Opportunity to play a key role in the operation and continuous improvement of an enterprise SOC.
• Work across incident response, SIEM optimisation, threat hunting and security service governance.
• Collaborate with experienced cyber security professionals and external SOC providers.
• Genuine opportunity to influence and improve SOC operations, monitoring capabilities and overall security maturity.
• Hybrid working arrangements with up to 50% work from home.
• Convenient Carseldine location with free onsite parking.
• On-call commitment of approximately one week in every six.