SOC Analyst

Aurizon; Queensland; On-site; AUD 80,000 - 100,000; Full time

Benefits offered by this job

Development and growth opportunities

Health insurance discounts

Mentoring and development programs

Parental leave program

Job summary

A leading rail freight operator in Queensland is looking for a skilled SOC/Incident Response professional to manage and respond to security incidents in hybrid IT/OT environments. Candidates should have a relevant tertiary qualification and at least 2 years of experience, along with certifications like CSA or CySA+. Strong scripting skills in PowerShell, Python, or Bash are mandatory. The company offers development opportunities, health insurance discounts, and a supportive culture.

Qualifications

• 2+ years' experience in a SOC/Incident Response role.
• Proven ability to work across security incidents from detection to resolution.
• Experience with Microsoft Sentinel preferred.

Responsibilities

• Triage and prioritise alerts and incidents from hybrid IT/OT environments.
• Conduct in-depth investigations of suspicious activities.
• Coordinate and escalate security incidents to specialist response teams.
• Lead initial containment and recovery actions for incidents.

Skills

SOC/Incident Response experience

Scripting in PowerShell, Python or Bash

Experience with Splunk

Network security fundamentals

Education

Tertiary qualification in IT, Software Engineering, Networking or Cyber Security

SOC/IR certifications (e.g., CSA, CySA+, GCIH, E|CIH)

Tools

CrowdStrike EDR

Nozomi for OT/ICS visibility

Microsoft Sentinel

Windows/Linux/Unix/Azure

Job description

Aurizon Brisbane City, Queensland, Australia

About the role

• Triage and prioritise alerts, incidents, and threat intel outputs from hybrid IT/OT environments.
• Conduct in-depth investigations of suspicious activity, including OT-specific threats.
• Coordinate and escallate security incidents to specialist response teams.
• Lead initial containment and recovery actions for incidents across our environment.
• Perform root cause analysis and recommend solutions to reduce risk.
• Collaborate with the Detection Engineering team to enhance detection coverage and quality.
• Analyse the latest OT malware and vulnerabilities to bolster defences.
• Support threat hunting and proactive identification of attack vectors in OT/ICS environments.
• Maintain and enhance response playbooks, tools, and documentation.
• Participate in post-incident reviews and support continuous improvement initiatives.
• Participate in the on-call roster rotation.

About you

• A relevant tertiary qualification in IT, Software Engineering, Networking or Cyber Security (mandatory).
• One or more SOC/IR certifications (e.g., CSA, CySA+, GCIH, E|CIH) (mandatory).
• 2+ years’ experience in a SOC/Incident Response role.
• Proven ability to work across security incidents from detection to resolution.
• Scripting skills in PowerShell, Python or Bash (mandatory).
• Strong experience with:
  • Splunk (including SPL and admin tasks)
  • CrowdStrike EDR
  • Nozomi for OT/ICS visibility
  • Windows/Linux/Unix and/or Azure administration
  • Network security fundamentals
• Experience with Microsoft Sentinel (preferred).

What we offer you

• Development and growth opportunities.
• Access to mentoring and development programs.
• Discounts on selected health insurance funds, personal travel, gyms, vehicles and retail brands.
• Parental leave program and super booster.

At Aurizon, we support the development and growth of our employees. With a national portfolio of operations, we offer long-term and exciting career opportunities.

https://youtu.be/PHESxVZ6dQY

Aurizon is Australia’s largest rail freight operator and a top 100 ASX company. Each year, we deliver more than 250 million tonnes of Australian commodities right across the country. Aurizon is crucial to the Australian economy, connecting miners, primary producers and industry with international and domestic markets.

About Aurizon.

Look to Aurizon for a diverse and collaborative culture.

To learn about us and our company values, please visit www.aurizon.com.au/careers