SOC Incident Responder — Flexible Hours & 24/7 Ops

Trinzic; Canberra; On-site; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Industry leading salaries

Flexible work arrangements

Salary packaging and novated leases

Paid professional membership fees

Life/Health insurance discounts

Employee stock purchase plans

Personal career development plans

Growth and promotion opportunities

Job summary

KBR is hiring a SOC Incident Responder to identify, investigate, contain, and respond to cybersecurity incidents across on‑premises, cloud, and users. You will triage alerts, analyze telemetry, and coordinate containment actions within a 24x7 SOC environment.

Ideal candidates bring 2–5+ years in security operations, proficiency with SIEM/EDR tools, and familiarity with MITRE ATT&CK to map threats. The role offers dynamic incident handling and opportunities for professional growth.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, CS, IT or equivalent.
• 2–5+ years in cybersecurity, SOC, incident response, or security operations.
• Familiarity with Windows, Linux, cloud platforms and enterprise networking.

Responsibilities

• Monitor and investigate security alerts from SIEM/EDR tools.
• Perform initial triage and determine incident severity, scope, and impact.
• Contain incidents via actions like account disablement, password resets, device isolation.
• Escalate high-severity incidents to senior security personnel.
• Analyze endpoint, network, identity, and cloud telemetry for IOC mapping.
• Create incident reports detailing findings, actions, and impact.
• Maintain detailed incident records and participate in post-incident reviews.

Skills

SIEM

EDR/XDR

Email security

Identity platforms

Network analysis

Education

Bachelor's degree in Cybersecurity or related field

2–5+ years in cybersecurity/SOC

Familiarity with Windows, Linux, cloud

Tools

Taegis

Microsoft Defender

CrowdStrike

SentinelOne

Defender for Identity/Entra ID

Job description

KBR is hiring a SOC Incident Responder to identify, investigate, contain, and respond to cybersecurity incidents across on‑premises, cloud, and users. You will triage alerts, analyze telemetry, and coordinate containment actions within a 24x7 SOC environment.

Ideal candidates bring 2–5+ years in security operations, proficiency with SIEM/EDR tools, and familiarity with MITRE ATT&CK to map threats. The role offers dynamic incident handling and opportunities for professional growth.