Senior SOC Analyst

Leidos Australia; Canberra; On-site; AUD 110,000 - 170,000; Full time

Job summary

Leidos Australia is expanding its 24x7 Central Processing Cyber Security Operations Centre (CP SOC) in Canberra. We seek Cyber Security Analysts to monitor, detect and respond to threats on our large ICT network in collaboration with the Department of Defence.

On-site 12-hour rotating shifts at HMAS Harman; this role requires Australian citizenship and NV-1 or NV-2 clearance, with experience in malware analysis, threat hunting and incident response.

Qualifications

• 2–5 years proven experience in cyber security analyst or similar role.
• Australian citizenship required and NV-1 or NV-2 security clearance.
• Ability to work in a 24x7x365 CP SOC environment with rotating shifts.

Responsibilities

• Monitor networks and endpoints for security alerts using SIEM, IDS/IPS, and EPP.
• Triage, investigate and manage security incidents end-to-end; escalate and report as needed.
• Assess threats and vulnerabilities; develop detection signatures and mitigations.
• Maintain security tools, improve runbooks, and ensure system health.
• Collaborate with stakeholders; produce incident reports and contribute to SOC playbooks.

Skills

Malware analysis

Memory forensics

Threat hunting

Reverse engineering

Threat intelligence

SIEM tuning

SOAR automation

Python scripting

Vulnerability management

Tools

IDS/IPS

Security tools

YARA

STIX/TAXII

Job description

• Leidos Life Hub provides access to discount offers or cashback rewards with over 400 Australian and International retailers.
• Due to the nature of the role, you must be an Australian Citizen and hold either a NV-1 or NV-2 Security Clearance

Description

Advanced Threat Hunter / SOC Engineer

• Leidos Life Hub provides access to discount offers or cashback rewards with over 400 Australian and International retailers.
• Due to the nature of the role, you must be an Australian Citizen and hold either a NV-1 or NV-2 Security Clearance
• Location: Canberra, Harman
  

Our team feel Leidos is a great place to work. Learn more about our culture and benefits by visiting us here https://www.leidos.com/company/global/australia/careers

Do Work That Matters

Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life. Our 2000 local experts, backed by our global experience and network of partners, are working to solve the world’s toughest challenges in government, intelligence, defence, aviation, border protection, and health markets.

Your New Role And Responsibilities

Leidos Australia is expanding our 24x7x365 Central Processing Cyber Security Operations Centre (CP SOC) capability with the Department of Defence. CP SOC works collaboratively with the Defence Security Operations Centre (DSOC) to assist in defending one of the largest and most complex ICT networks in the southern hemisphere.

We seek Cyber Security Analysts to work on a rotating shift roster (typically 12-hour shifts) onsite at HMAS Harman in Canberra.

The Roles And Responsibilities Extend To

• Monitor and Analyse Security Events: Continuously monitor networks and endpoints for security alerts, threats, and intrusions using SIEM tools, IDS/IPS, and endpoint protection systems.
  
• Incident Response and Management: Triage, investigate, and manage security incidents end-to-end, including escalation and reporting as required.
  
• Threat and Vulnerability Management: Assess emerging threats and vulnerabilities, develop custom detection signatures, and implement measures to mitigate risks.
  
• Security Tool Administration and Process Improvement: Maintain and support security tools, review and improve operational processes, and ensure the health of deployed security systems.
  
• Stakeholder Communication and Reporting: Collaborate with internal teams and stakeholders, produce reports, and contribute to the development of SOC tactics, techniques, and procedures.
  

Core Skills & Knowledge

• Performs advanced malware analysis and memory forensics
  
• Leads threat hunting and long-term mitigation
  
• Refines policies and collaborates with external stakeholders
  
• Reverse engineering malware.
  
• Threat intelligence integration (STIX/TAXII, YARA).
  
• SIEM tuning and automation (SOAR, Python scripting).
  
• Vulnerability management and threat modelling.
  

Key Tasks

• Develop detection rules.
  
• Lead SOC uplift projects/tasks
  
• Automate workflows.
  
• Lead post-incident reviews and mentor junior analysts.
  

What You’ll Bring To Make An Impact

• Proven Experience: you will have ideally 2-5 years proven experience working in the same or similar role
  
• Technical Cyber Security Knowledge: Working knowledge of industry and government cybersecurity frameworks, SIEM tools, IDS/IPS, and endpoint security solutions.
  
• Analytical and Problem-Solving Skills: Ability to identify, analyse, and resolve complex security issues with a proactive and self-starting approach.
  
• Incident Response Expertise: Experience in detecting, responding to, and mitigating cyber threats using adversary TTPs and IOCs.
  
• Communication and Stakeholder Management: Strong verbal and written communication skills for incident reporting and stakeholder engagement.
  
• Adaptability and Continuous Learning: Willingness to rapidly upskill, work in a 24/7 rotating shift environment, and stay updated on evolving cyber threats.
  

Don't worry if you don't tick all the boxes - if you meet most of them, we encourage you to submit your application. We're most interested in your strengths, what you want to learn and how far you want to go.

Diverse Team Members, Shared Values and a Common Purpose

Providing our customers with smarter solutions takes an incredible team with diversity of thought, experience and perspectives driving innovation. Inclusion is at the heart of our culture and is one of our core values. It's about creating a workplace where everyone can do important work, feels welcome, valued, and respected, and has equal access to opportunities to thrive. Paul Chase - Chief Executive, Leidos Australia.

Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace. We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups.

Our five Advocacy Groups (Women and Allies Network, Young Professionals, Defence & Emergency Services, Action for Accessibility and Abilities and Pride+) provide an opportunity for team members to connect and collaborate on shared interests, and work to support and celebrate our diverse community.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay And Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.