SOC Analyst

Talenza; Canberra; On-site; AUD 126,000 - 154,000; Full time

Job summary

Defence Intelligence in Canberra is seeking a SOC Analyst for a full-time, permanent role. You will join a new Security Operations capability, protect mission-critical networks for a Defence intelligence agency, and help shape processes and detection capabilities as systems go live over the next 12-18 months.

You will report to the Security Operations Team Lead, work independently, and cover monitoring, vulnerability management, cyber threat intelligence, and security engineering across SIEM,

Qualifications

• 3-5+ years' experience in security operations, SOC or a closely related IT security role.
• Hands-on experience with SIEM and EDR tools.
• Confidence working independently on investigations and incidents.
• Scripting or coding experience (e.g. Python, PowerShell) is highly regarded.
• Experience in Defence or intelligence environments is highly desirable.

Responsibilities

• Security monitoring, detection and incident response
• Vulnerability management
• Cyber threat intelligence
• Security engineering across SIEM, endpoint, network, gateway and detection
• Change review and approvals, and trusted advisory to stakeholders
• Writing security operations system requirements
• Building relationships with partner SOCs and security authorities inside and outside Defence

Skills

Security operations

SIEM

EDR

Python

PowerShell

Investigation

Defence/Intelligence experience

Tools

SIEM tools

EDR tools

Job description

SOC Analyst: Defence Intelligence | Canberra

Full-time, permanent | Canberra, ACT | $140,000 + super | NV2 minimum (TSPV preferred)

About the opportunity

A leading global Defence and technology prime is building out a new Security Operations capability. The team will protect mission-critical networks for a Defence intelligence agency.

This isn't a BAU SOC seat. Over the next 12-18 months several new systems go live, and the team structure, processes and detection capability are still being shaped. You'll join at a stage where you have a real hand in how it runs.

What you'll be doing

You will report to the Security Operations Team Lead and work independently within your area of responsibility. You'll work across:

• Security monitoring, detection and incident response
• Vulnerability management
• Cyber threat intelligence
• Security engineering across SIEM, endpoint, network, gateway and detection
• Change review and approvals, and trusted advisory to stakeholders
• Writing security operations system requirements
• Building relationships with partner SOCs and security authorities inside and outside Defence

What you'll bring

• 3-5+ years' experience in security operations, SOC or a closely related IT security role
• Hands-on experience with SIEM and EDR tools
• Confidence working independently on investigations and incidents
• Scripting or coding experience (e.g. Python, PowerShell) is highly regarded
• Experience in Defence or intelligence environments is highly desirable
• An interest in helping to build and mature a developing capability

Security requirements

• Australian Citizenship is mandatory
• An active TSPV is preferred
• Active NV2 holders will be considered if they're willing to uplift to TSPV
• You must be able to meet the agency's additional access requirements