- Rate: $82 to $88/hour(depending on skills and experience, plus superannuation)
- Duration: 12-month contract( with view to extend)
- Location: Carseldine, Brisbane (No fully remote options available)
- Work Arrangement: 50% Work from Home (WFH) flexibility
- Perks: Free onsite parking
- Position Type: Contract (includes a 1-in-6-week on-call rotation)
Join a prominent QLD Government department within their Information Technology Branch as a Senior SOC Analyst on an initial 12-month contract, with strong potential for further extensions. You will play a pivotal role in operating and maturing the department's Security Operations Centre. Working alongside a Managed Service Provider (MSP), you will monitor, identify, investigate, and respond to cyber security incidents, while leading continual improvement initiatives to ensure a fit-for-purpose SOC.
Key Responsibilities
- MSP Governance: Provide technical and governance oversight of the MSP, ensuring delivery aligns with contractual obligations, SLAs, security requirements, and government governance frameworks.
- SIEM Optimization: Review and uplift SIEM processes, including log source onboarding, health checks, and operational procedures.
- Detection & Log Engineering: Collaborate with system owners and the MSP to eliminate logging gaps and improve detection rules and use cases.
- Incident Response & Analysis: Investigate threats and enrich investigations using contextual data, Indicators of Compromise (IOCs), and attacker Tactics, Techniques, and Procedures (TTPs).
- Proactive Threat Hunting: Conduct and review targeted threat hunting activities in response to emerging cyber threats.
- Stakeholder Collaboration: Partner closely with internal teams and the Queensland Government Cyber Security Unit (QGCSU) for incident resolution and reporting.
About You
We are looking for a technical leader with a strong background in modern SOC operations and a knack for vendor governance. Your pay rate within the offered bracket will be determined based on the depth of your technical and governance expertise.
To be successful, your application should clearly demonstrate:
- Proven experience managing or providing oversight to external IT/Cyber Security Managed Service Providers (MSPs).
- Deep technical expertise in SIEM management, engineering use cases, and log onboarding.
- Strong incident response capabilities, utilizing IOCs and TTP frameworks to investigate complex threats.
- Proactive threat hunting experience and a continuous improvement mindset.
- Exceptional communication skills to collaborate with internal stakeholders and broader government security units (like QGCSU).
Requirements & Eligibility
- Location: Candidates must be local to the Brisbane area to support the partial onsite requirement (50% WFH). Fully remote applications will not be considered.
- On-Call: This role requires mandatory participation in an on-call roster (currently one week in six).
- Vetting: The successful candidate will be required to undergo a mandatory criminal history check prior to commencement.
Please submit your resume and a brief cover letter detailing how your skillset aligns with the role specifications outlined above.
