Senior SOC Specialist

Decipher Bureau; Brisbane; Remote; AUD 180,000 - 220,000; Full time

Benefits offered by this job

100% remote work in Australia

On-call allowance

Professional development

Employee benefits

Job summary

Decipher Bureau is seeking a Senior SOC Specialist (L3) to lead complex incident investigations within a 24/7 Security Operations Centre. You will mentor junior analysts, drive detection engineering, and coordinate with threat intelligence teams to protect client environments.

You will oversee escalation for L1/L2, develop advanced detections, and provide technical guidance during incidents, including outside standard hours, across international engagements.

Qualifications

• Experience in a SOC environment at senior or L3 level.
• Proven ability to investigate and respond to complex cyber security incidents.
• Hands-on with SIEM platforms, event correlation and threat detection technologies.
• Knowledge of network IDS, endpoint protection and host-based monitoring tools.
• Experience with threat hunting, intelligence, detection engineering and tuning.
• Strong leadership and mentoring abilities within SOC teams.
• Ability to communicate technical findings to clients and stakeholders.

Responsibilities

• Act as L3 escalation point for complex security incidents and lead investigations.
• Analyse security events across SIEM, IDS and host-based tools.
• Investigate attacker methods, vulnerabilities and threat actor behavior.
• Identify TTPs to improve threat detection and response.
• Collaborate on threat hunting, intelligence and detection engineering.
• Develop and tune detections for emerging threats across client environments.
• Mentor L1/L2 analysts and lead SOC capability improvements.
• Serve as technical contact for clients during incident response, including after-hours.

Skills

SOC experience

L3 escalation

Threat hunting

Threat intelligence

Detection engineering

Incident response

Mentoring

SIEM

Security monitoring

Tools

SIEM platforms

Network IDS

Endpoint security

Threat intelligence tools

Job description

Setting the Scene

Our client is a leading global professional services organisation delivering technology, risk advisory and cyber security services to major organisations across Australia and internationally. Its cyber security team helps clients navigate evolving threats, strengthen security capabilities and improve resilience through advanced security solutions and managed services. The 24/7 Security Operations Centre (SOC) delivers managed detection and response services to international clients, using advanced monitoring, investigation and response capabilities to identify threats and protect critical systems and information.

The Role

As a Senior SOC Specialist (L3), you'll play a key technical and leadership role within a 24/7 Security Operations Centre. Reporting to the SOC Team Lead, you'll act as the escalation point for L1 and L2 analysts, leading complex incident investigations and providing advanced incident response expertise. You'll also lead a dedicated capability area, improving processes and detection capabilities, enhancing service delivery for high-profile clients, and collaborating on threat hunting, threat intelligence and detection engineering. Alongside this, you'll mentor junior analysts and drive continuous improvement across SOC operations.

Key Responsibilities

• Act as the L3 escalation point for complex security incidents, providing advanced investigation and incident response support.
• Analyse and correlate security events across SIEM platforms, network intrusion detection systems and host-based security tools.
• Investigate malicious activity to identify exploited vulnerabilities, attack methods, potential impacts and threat actor behaviour.
• Identify and analyse attacker tactics, techniques and procedures (TTPs) to support effective threat detection and response.
• Collaborate with other L3 specialists on threat hunting, threat intelligence, detection development and security monitoring improvements.
• Develop, implement and tune security detections in response to emerging threats and suspicious activity across client environments.
• Provide technical guidance, coaching and mentorship to L1 and L2 SOC Analysts, including night-shift teams.
• Lead a dedicated SOC capability area, driving process improvements and better operational outcomes for high-profile clients.
• Act as a technical point of contact for clients during incident response activities, including outside standard business hours.
• Review, document and enhance operational procedures to improve the effectiveness and maturity of security operations.
• Contribute to the continuous improvement of detection, investigation and response capabilities across the SOC.

• Act as the L3 escalation point for complex security incidents, providing advanced investigation and incident response support.
• Analyse and correlate security events across SIEM platforms, network intrusion detection systems and host-based security tools.
• Investigate malicious activity to identify exploited vulnerabilities, attack methods, potential impacts and threat actor behaviour.
• Identify and analyse attacker tactics, techniques and procedures (TTPs) to support effective threat detection and response.
• Collaborate with other L3 specialists on threat hunting, threat intelligence, detection development and security monitoring improvements.
• Develop, implement and tune security detections in response to emerging threats and suspicious activity across client environments.
• Provide technical guidance, coaching and mentorship to L1 and L2 SOC Analysts, including night-shift teams.
• Lead a dedicated SOC capability area, driving process improvements and better operational outcomes for high-profile clients.
• Act as a technical point of contact for clients during incident response activities, including outside standard business hours.
• Review, document and enhance operational procedures to improve the effectiveness and maturity of security operations.
• Contribute to the continuous improvement of detection, investigation and response capabilities across the SOC.

What You'll Bring

• Demonstrated experience in a SOC environment, ideally in an L3, senior security analyst or incident response position.
• Strong experience investigating, analysing and responding to complex cyber security incidents.
• Hands-on experience with SIEM platforms, security event correlation and threat detection technologies.
• Knowledge of network intrusion detection, endpoint security and host-based security monitoring tools.
• Experience with threat hunting, threat intelligence, detection engineering and detection tuning.
• Strong understanding of attacker tactics, techniques and procedures (TTPs), intrusion methods and defensive security practices.
• Ability to provide technical leadership, mentor junior analysts and support the development of SOC capabilities.
• Experience improving security processes, operational procedures and incident response practices.
• Strong communication and stakeholder engagement skills, including the ability to communicate technical findings and response actions to clients.
• Ability to operate effectively in a fast-paced, 24/7 security operations environment, including participation in an L3 escalation roster.
• Must be an Australian citizen and able to obtain and maintain an Australian Government security clearance at NV1 level or higher.

• Demonstrated experience in a SOC environment, ideally in an L3, senior security analyst or incident response position.
• Strong experience investigating, analysing and responding to complex cyber security incidents.
• Hands-on experience with SIEM platforms, security event correlation and threat detection technologies.
• Knowledge of network intrusion detection, endpoint security and host-based security monitoring tools.
• Experience with threat hunting, threat intelligence, detection engineering and detection tuning.
• Strong understanding of attacker tactics, techniques and procedures (TTPs), intrusion methods and defensive security practices.
• Ability to provide technical leadership, mentor junior analysts and support the development of SOC capabilities.
• Experience improving security processes, operational procedures and incident response practices.
• Strong communication and stakeholder engagement skills, including the ability to communicate technical findings and response actions to clients.
• Ability to operate effectively in a fast-paced, 24/7 security operations environment, including participation in an L3 escalation roster.
• Must be an Australian citizen and able to obtain and maintain an Australian Government security clearance at NV1 level or higher.

Experience within managed security services, large enterprise environments or complex multi-client SOC operations will be highly regarded.

What's in It for You?

• $200,000 package for a permanent position.
• 100% remote- work from any major Australian city.
• Approximately $10,000 additional on-call allowance, with on-call responsibilities approximately every five to six weeks.
• Join a well-established professional services organisation with a strong cyber security practice.
• Work across complex security environments and high-profile international client engagements.
• Take ownership of incident response and contribute to advanced threat detection capabilities.
• Lead a dedicated capability area and influence the continuous improvement of SOC operations.
• Mentor and develop junior analysts while collaborating with experienced senior security specialists.
• Access professional development, coaching and leadership programs to support career progression.
• Benefit from flexible working options, wellbeing initiatives and a range of employee benefits.
• Opportunities available across major Australian cities.

• $200,000 package for a permanent position.
• 100% remote- work from any major Australian city.
• Approximately $10,000 additional on-call allowance, with on-call responsibilities approximately every five to six weeks.
• Join a well-established professional services organisation with a strong cyber security practice.
• Work across complex security environments and high-profile international client engagements.
• Take ownership of incident response and contribute to advanced threat detection capabilities.
• Lead a dedicated capability area and influence the continuous improvement of SOC operations.
• Mentor and develop junior analysts while collaborating with experienced senior security specialists.
• Access professional development, coaching and leadership programs to support career progression.
• Benefit from flexible working options, wellbeing initiatives and a range of employee benefits.
• Opportunities available across major Australian cities.

Additional information

• Lead incident response, threat hunting and detection engineering activities
• Provide technical leadership, mentor analysts and improve security operations
• Permanent opportunity | $210k package | 100% Remote