" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSenior SOC Analyst\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20749\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20751\"\u003e Brisbane \u003c/li\u003e \u003cli data-id=\"20752\"\u003e Contract or Temp \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 10/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eSenior SOC role covering incident response, SIEM and threat hunting.\u003c/li\u003e \u003cli\u003eMSP oversight, security monitoring and SOC improvement.\u003c/li\u003e \u003cli\u003eBrisbane based | Hybrid working environment | Long term contract\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eSetting the Scene\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eOur client is a large public sector organisation operating within a complex technology environment, with a strong focus on strengthening its cyber security capabilities and protecting critical services. The organisation works closely with an external Managed Service Provider (MSP) to deliver its Security Operations Centre (SOC) services and is focused on improving security monitoring, incident response and overall SOC maturity.\u0026nbsp;\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eThe Role \u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eAs a Senior SOC Analyst, you\u0027ll play a key role in supporting the day-to-day operation and ongoing development of the organisation\u0027s SOC. Working closely with the MSP, internal technical teams and key government security stakeholders, you\u0027ll combine hands-on security operations with technical governance and service provider oversight. You\u0027ll be responsible for reviewing and uplifting SIEM processes, identifying logging and detection gaps, investigating cyber security incidents and driving initiatives to improve the effectiveness and maturity of SOC operations.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003e Key Responsibilities\u003c/strong\u003e \u003cul\u003e \u003cli\u003eProvide technical and governance oversight of the Managed Service Provider (MSP), ensuring SOC services are delivered in accordance with contractual obligations, agreed service levels, security requirements, technical standards and operational procedures.\u003c/li\u003e \u003cli\u003eReview, assess and uplift Security Information and Event Management (SIEM) processes to improve security monitoring and detection capabilities.\u003c/li\u003e \u003cli\u003eOversee log source onboarding, monitoring health checks and operational procedures to ensure appropriate visibility across the environment.\u003c/li\u003e \u003cli\u003eWork closely with internal technical teams, system owners and the MSP to identify and address logging gaps and improve detection rules, alerting mechanisms and security use cases.\u003c/li\u003e \u003cli\u003eIdentify, prioritise and implement continuous improvement initiatives to strengthen SOC capability, operational efficiency and overall security maturity.\u003c/li\u003e \u003cli\u003eMonitor, investigate and respond to cyber security threats and incidents, ensuring findings, follow-up actions and lessons learned are appropriately documented.\u003c/li\u003e \u003cli\u003eCollaborate with internal technical teams and the MSP to coordinate incident investigation, response and resolution activities.\u003c/li\u003e \u003cli\u003eEnrich security investigations through the analysis of contextual data, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).\u003c/li\u003e \u003cli\u003eWork with relevant government cyber security stakeholders to support incident resolution, escalation and reporting.\u003c/li\u003e \u003cli\u003eConduct and review proactive threat hunting activities in response to emerging cyber security threats and intelligence.\u003c/li\u003e \u003cli\u003eAssess SOC operational performance and identify opportunities to improve service delivery, monitoring effectiveness and incident response processes.\u003c/li\u003e \u003cli\u003eContribute to the development and refinement of SOC procedures, reporting and operational documentation.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat You\u0027ll Bring\u003c/strong\u003e \u003cul\u003e \u003cli\u003eSignificant experience working within a Security Operations Centre (SOC), ideally at a Senior SOC Analyst, L2/L3 Analyst or Technical Lead level.\u003c/li\u003e \u003cli\u003eDemonstrated experience working with Security Information and Event Management (SIEM) platforms, including monitoring, log management and alert investigation.\u003c/li\u003e \u003cli\u003eExperience reviewing and improving SIEM processes, including log source onboarding, detection engineering, alert tuning and development of security use cases.\u003c/li\u003e \u003cli\u003eProven experience investigating and responding to cyber security incidents, from initial detection through to containment, remediation and resolution.\u003c/li\u003e \u003cli\u003eStrong understanding of threat hunting methodologies, threat intelligence, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).\u003c/li\u003e \u003cli\u003eFamiliarity with the MITRE ATT\u0026amp;CK framework and its application to threat detection, investigation and response.\u003c/li\u003e \u003cli\u003eExperience working with Managed Security Service Providers (MSSPs) or outsourced SOC environments.\u003c/li\u003e \u003cli\u003eDemonstrated ability to provide technical oversight of external SOC providers, including monitoring service delivery, operational performance and service level agreements.\u003c/li\u003e \u003cli\u003eExperience identifying security monitoring gaps and implementing improvements to detection capabilities and SOC processes.\u003c/li\u003e \u003cli\u003eStrong analytical and problem-solving skills, with the ability to investigate complex security events and communicate findings effectively.\u003c/li\u003e \u003cli\u003eExcellent stakeholder engagement skills, with the ability to collaborate across internal technical teams, system owners, external providers and government stakeholders.\u003c/li\u003e \u003cli\u003eStrong written communication skills, including the ability to document incidents, investigations, recommendations and lessons learned.\u003c/li\u003e \u003cli\u003eA proactive approach to continuous improvement, with a genuine interest in strengthening SOC capability and operational maturity.\u003c/li\u003e \u003cli\u003eExperience working within government or other large, complex enterprise environments will be highly regarded.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat\u0027s in It for You:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eOpportunity to play a key role in the operation and continuous improvement of an enterprise SOC.\u003c/li\u003e \u003cli\u003eWork across incident response, SIEM optimisation, threat hunting and security service governance.\u003c/li\u003e \u003cli\u003eCollaborate with experienced cyber security professionals and external SOC providers.\u003c/li\u003e \u003cli\u003eGenuine opportunity to influence and improve SOC operations, monitoring capabilities and overall security maturity.\u003c/li\u003e \u003cli\u003eHybrid working arrangements with up to 50% work from home.\u003c/li\u003e \u003cli\u003eConvenient Carseldine location with free onsite parking.\u003c/li\u003e \u003cli\u003eOn-call commitment of approximately one week in every six.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eHow to Apply\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eApplications are treated with absolute confidentiality. Click \u003cstrong\u003eAPPLY\u003c/strong\u003e or contact \u003cstrong\u003eClodagh at \u003c/strong\u003e\u003cstrong\u003eclodagh@decipherbureau.com\u003c/strong\u003e for an informal conversation about this opportunity. Equal opportunity and diversity are valued and encouraged.\u003c/div\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4485289\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "