" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSenior SOC Specialist\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20749\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20751\"\u003e Brisbane \u003c/li\u003e \u003cli data-id=\"20752\"\u003e Permanent / Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 26/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eLead incident response, threat hunting and detection engineering activities\u003c/li\u003e \u003cli\u003eProvide technical leadership, mentor analysts and improve security operations\u003c/li\u003e \u003cli\u003ePermanent opportunity | $210k package | Major Australian cities\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eSetting the Scene\u003c/strong\u003e Our client is a leading global professional services organisation delivering technology, risk advisory and cyber security services to major organisations across Australia and internationally. Its cyber security team helps clients navigate evolving threats, strengthen security capabilities and improve resilience through advanced security solutions and managed services. The 24/7 Security Operations Centre (SOC) delivers managed detection and response services to international clients, using advanced monitoring, investigation and response capabilities to identify threats and protect critical systems and information.\u003c/div\u003e \u003cbr\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eThe Role\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eAs a Senior SOC Specialist (L3), you\u0027ll play a key technical and leadership role within a 24/7 Security Operations Centre. Reporting to the SOC Team Lead, you\u0027ll act as the escalation point for L1 and L2 analysts, leading complex incident investigations and providing advanced incident response expertise. You\u0027ll also lead a dedicated capability area, improving processes and detection capabilities, enhancing service delivery for high-profile clients, and collaborating on threat hunting, threat intelligence and detection engineering. Alongside this, you\u0027ll mentor junior analysts and drive continuous improvement across SOC operations.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eKey Responsibilities\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e \u003cul\u003e \u003cli\u003eAct as the L3 escalation point for complex security incidents, providing advanced investigation and incident response support.\u003c/li\u003e \u003cli\u003eAnalyse and correlate security events across SIEM platforms, network intrusion detection systems and host-based security tools.\u003c/li\u003e \u003cli\u003eInvestigate malicious activity to identify exploited vulnerabilities, attack methods, potential impacts and threat actor behaviour.\u003c/li\u003e \u003cli\u003eIdentify and analyse attacker tactics, techniques and procedures (TTPs) to support effective threat detection and response.\u003c/li\u003e \u003cli\u003eCollaborate with other L3 specialists on threat hunting, threat intelligence, detection development and security monitoring improvements.\u003c/li\u003e \u003cli\u003eDevelop, implement and tune security detections in response to emerging threats and suspicious activity across client environments.\u003c/li\u003e \u003cli\u003eProvide technical guidance, coaching and mentorship to L1 and L2 SOC Analysts, including night-shift teams.\u003c/li\u003e \u003cli\u003eLead a dedicated SOC capability area, driving process improvements and better operational outcomes for high-profile clients.\u003c/li\u003e \u003cli\u003eAct as a technical point of contact for clients during incident response activities, including outside standard business hours.\u003c/li\u003e \u003cli\u003eReview, document and enhance operational procedures to improve the effectiveness and maturity of security operations.\u003c/li\u003e \u003cli\u003eContribute to the continuous improvement of detection, investigation and response capabilities across the SOC.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat You\u0027ll Bring\u003c/strong\u003e\u0026nbsp;\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e \u003cul\u003e \u003cli\u003eDemonstrated experience in a SOC environment, ideally in an L3, senior security analyst or incident response position.\u003c/li\u003e \u003cli\u003eStrong experience investigating, analysing and responding to complex cyber security incidents.\u003c/li\u003e \u003cli\u003eHands-on experience with SIEM platforms, security event correlation and threat detection technologies.\u003c/li\u003e \u003cli\u003eKnowledge of network intrusion detection, endpoint security and host-based security monitoring tools.\u003c/li\u003e \u003cli\u003eExperience with threat hunting, threat intelligence, detection engineering and detection tuning.\u003c/li\u003e \u003cli\u003eStrong understanding of attacker tactics, techniques and procedures (TTPs), intrusion methods and defensive security practices.\u003c/li\u003e \u003cli\u003eAbility to provide technical leadership, mentor junior analysts and support the development of SOC capabilities.\u003c/li\u003e \u003cli\u003eExperience improving security processes, operational procedures and incident response practices.\u003c/li\u003e \u003cli\u003eStrong communication and stakeholder engagement skills, including the ability to communicate technical findings and response actions to clients.\u003c/li\u003e \u003cli\u003eAbility to operate effectively in a fast-paced, 24/7 security operations environment, including participation in an L3 escalation roster.\u003c/li\u003e \u003cli\u003eMust be an Australian citizen and able to obtain and maintain an Australian Government security clearance at NV1 level or higher.\u003c/li\u003e \u003c/ul\u003e Experience within managed security services, large enterprise environments or complex multi-client SOC operations will be highly regarded.\u0026nbsp;\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003e\u003cbr\u003eWhat\u0027s in It for You?\u003c/strong\u003e\u0026nbsp;\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e \u003cul\u003e \u003cli\u003e$200,000 package for a permanent position.\u003c/li\u003e \u003cli\u003eApproximately $10,000 additional on-call allowance, with on-call responsibilities approximately every five to six weeks.\u003c/li\u003e \u003cli\u003eJoin a well-established professional services organisation with a strong cyber security practice.\u003c/li\u003e \u003cli\u003eWork across complex security environments and high-profile international client engagements.\u003c/li\u003e \u003cli\u003eTake ownership of incident response and contribute to advanced threat detection capabilities.\u003c/li\u003e \u003cli\u003eLead a dedicated capability area and influence the continuous improvement of SOC operations.\u003c/li\u003e \u003cli\u003eMentor and develop junior analysts while collaborating with experienced senior security specialists.\u003c/li\u003e \u003cli\u003eAccess professional development, coaching and leadership programs to support career progression.\u003c/li\u003e \u003cli\u003eBenefit from flexible working options, wellbeing initiatives and a range of employee benefits.\u003c/li\u003e \u003cli\u003eOpportunities available across major Australian cities.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eHow to Apply\u003c/strong\u003e\u0026nbsp;\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eApplications are treated with absolute confidentiality. Click \u003cstrong\u003eAPPLY\u003c/strong\u003e or contact \u003cstrong\u003eClodagh at \u003c/strong\u003e\u003cstrong\u003eclodagh@decipherbureau.com\u0026nbsp;\u003c/strong\u003efor an informal conversation about your next career move. Equal opportunity and diversity are valued and encouraged.\u003c/div\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4481363\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "