Job Description

XPT Software Australia Pty Ltd | Contract

n

SOC Analyst

n

Melbourne, Australia | Posted on 05/19/2026

n

n
- XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
n
- XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
n
- We have 120+technocrats in Australia working at our clientlocations.
n
- XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
n
- We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
n

n

Job Description

n

Role Summary

n

The Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments, triagingpenetration test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.

n

The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC, andinfrastructure/application teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‐ready evidence forregulated/government environments.

n

Key Responsibilities

n

NIST Assessment Support (CSF / NIST 800Series)

n

n
- SupportNIST CSF / NIST 800‐53 / 800‐61 / 800‐92 assessments through:
n
- Controlevidence collection
n
- Gapanalysis support
n
- Mappingtooling controls to NIST requirements
n
- Assistarchitects and governance teams in preparing:
n
- Controlimplementation summaries
n
- Toolcapability mapping
n
- Evidencepacks for audits and client reviews
n
- Trackand manage security gaps, risks, and remediation actions in line withagreed timelines
n
- Supportcontinuous improvement initiatives driven by assessment outcomes
n

n

Penetration Test Findings &Remediation;

n

n
- Triageand analyse application, infrastructure, and network penetration testfindings
n
- Workwith platform and application teams to:
n




- Prioritiseremediation based on risk and exploitability
n
- Executeor support remediation actions such as:
n
- Controlenablement or enhancement
n
- Trackremediation status and provide transparent closure evidence for governance andaudit forums
n
- Activitiesinclude:
n
- Policytuning and baseline hardening
n
- Coverageand health checks
n
- Supportingremediation of vulnerabilities and misconfigurations
n

n

Support security controls across:

n

n
- Ciscosecurity platforms
n
- Imperva
n
- MicrosoftGSA / related network security controls
n

n

Responsibilities include:

n

n
- Supportingfirewall / network security rule reviews and clean‐ups
n
- Assistingwith remediation of network‐related pen test findings
n
- Supportingchange validation and post‐implementation checks
n
- Workingwith network teams to ensure security controls align with NIST and secure‐by‐designprinciples
n
- SupportSIEM and monitoring platforms:
n
- Splunk
n
- MicrosoftSentinel
n
- Assistwith:
n
- Detection coverage checks related to NIST andpen test scenarios
n
- Validation that remediated controls generateexpected telemetry
n
- SupportSOC teams with investigation data where required
n
- Remediationactions
n
- Controlchanges
n
- Evidencerequired for audits and MSSR / governance reviews
n
- Incident and problem reviews (P1 / P2 support)
n
- Root cause analysis where control gaps areidentified
n
- Followstructured change and release processes (CAB, validation, rollback awareness)
n

n

Skills &Experience;

n

n
- 5 years experience in security engineering / SecOps / blue teamroles
n
- Exposure to NIST CSF or NIST 800 frameworks
n
- Hands‐on experience supporting remediation across:
n
- Endpoint / infrastructuresecurity tools
n
- Vulnerability managementplatforms
n
- Network security controls
n
- Experience working with penetration test reports and remediationtracking
n
- Familiarity with SIEM platforms (Splunk and/or Sentinel)
n

#J-18808-Ljbffr

📌 SOC Analyst (Victoria)
🏢 Xpt Software Australia
📍 Victoria