Title: SOC Incident Responder

The SOC Incident Responder is responsible for identifying, investigating, containing, and responding to cybersecurity incidents affecting the organization's systems, networks, cloud environments, and users. This role serves as a key member of the Security Operations Center, performing rapid incident triage, threat analysis, containment actions, and escalation of significant security events. The successful candidate will combine technical cybersecurity expertise with strong analytical, communication, and documentation skills to minimize risk and ensure timely response to cybersecurity threats.

Key Responsibilities

- Incident Detection & Response
- Monitor and investigate security alerts from Taegis, Defender as well as user or third-party reported incidents.
- Perform initial triage and analysis of suspicious events and potential security incidents.
- Determine incident severity, scope, and business impact.
- Contain security incidents through actions such as:
- Account disablement
- Password resets
- Session revocation
- Device isolation
- IP and domain blocking
- Escalate complex or high-severity incidents to senior security personnel.

- Investigation & Analysis

- Analyze endpoint, network, identity, and cloud telemetry.
- Correlate indicators of compromise (IOCs) with threat intelligence sources.
- Conduct malware investigations and support forensic analysis activities.
- Track attacker tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.;

- Incident Documentation

- Maintain detailed incident records and case documentation.
- Create incident reports detailing findings, actions taken, and business impact.
- Ensure evidence is collected, preserved, and documented appropriately.
- Participate in post-incident reviews and lessons-learned sessions.

- Collaboration

- Coordinate with IT Operations, Service Desk, Infrastructure, Network, and Cloud teams during investigations.
- Support major incident response activities and virtual war room operations during significant security events.

- Continuous Improvement

- Contribute to development of SOC playbooks and response procedures.
- Recommend improvements to detection rules, monitoring coverage, and response workflows.




- Assist in threat hunting and security control validation activities.
- Stay current with emerging threats, vulnerabilities, and industry best practices.

Required Qualifications

- Education: Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience or, 2-5+ years of cybersecurity, SOC, incident response, or security operations experience.
- Familiarity with Windows, Linux, cloud platforms, and enterprise networking.

Technical Skills

- Familiarity with SIEM technologies EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, Taegis, etc.)
- Email security technologies
- Identity platforms such as Active Directory and Entra ID
- Network protocols and traffic analysis

Preferred Certifications

- Baseline Clearance, NV-1 Eligible or Existing NV-1 Preferred GCIH (GIAC Certified Incident Handler)
- GCIA
- GCFA
- CISSP
- Security+ CySA+ SC-200 (Microsoft Security Operations Analyst)

Working Conditions

Participation in a 24x7 SOC shift rotation and on-call coverage as required. Support for major cybersecurity incidents outside normal business hours. Ability to manage multiple concurrent security investigations.

Why Join KBR?

At KBR, our people are at the heart of everything we do. Our success is built on a culture of caring, collaboration, trust and continuous learning, where every team member feels secure, supported, valued and empowered to thrive. We are committed to creating an inclusive workplace where people can belong, connect and grow, while doing meaningful work that makes a lasting impact on communities across Australia. Through genuine collaboration and strong partnerships with our clients, we deliver innovative and sustainable solutions for a better tomorrow. When you join KBR, you'll become part of a team that shares common values, works together towards a common purpose, and genuinely cares about the success and wellbeing of its people.





Benefits include:

- Industry leading salaries reviewed annually.
- Flexible work arrangements (start/finish times, WFH, Flex time)
- Salary packaging and novated leases
- Paid professional membership fees
- Life/Health insurance discounts
- Employee stock purchase plans
- Personal career development plans
- Growth and promotion opportunities

#LI-DNP #LI-DNI #S-DNI

KBR — Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business. We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.

#J-18808-Ljbffr

📌 SOC Incident Responder (New South Wales)
🏢 Kbr
📍 New South Wales