About the Company

• A well‑established enterprise security services provider supporting large‑scale government and private‑sector environments across Australia.
• Operates a mature, managed Security Operations Centre (SOC) delivering 24x7 monitoring and incident response services.
• Known for working on high‑assurance, regulated environments, offering long‑term stability and exposure to complex security operations.

About the Role

This is an opportunity for a SOC Engineer to join a 24x7 managed SOC supporting a mix of government and private‑sector clients. The role is hands‑on and operational, suited to someone who enjoys frontline security monitoring, alert triage, and working in a structured SOC environment. You'll contribute to monitoring, incident response, fine tuning of tools, alert creation, vulnerability management, and ticket handling across multiple client environments.



About You

• Australian citizen (security clearance preferred but not essential).
• 2-3+ years' experience working in a SOC or security operations role.
• Mix of engineering and analyst experience.
• Hands‑on experience tuning alerts and reducing noise on the tools.
• Exposure to SIEM monitoring and alert triage in enterprise environments.
• Solid networking fundamentals (traffic flow, protocols, troubleshooting).
• Previous MSP or multi‑client SOC experience highly regarded.

Role Accountabilities

• Perform 24x7 SOC monitoring ("eyes on glass") using Splunk and other security tools.
• Triage and investigate security alerts, escalating incidents where required.
• Support basic incident response activities and vulnerability management tasks.
• Manage and triage Zscaler alerts and tickets in line with defined SLAs.
• Maintain accurate documentation and follow established SOC processes and procedures.

Benefits

• Opportunity to work in a large, enterprise‑grade SOC supporting high‑profile government environments.
• Exposure to multiple client environments across government and private sectors.
• Strong foundation for career progression into L2 SOC, incident response, or SIEM‑focused roles.