Job Description
XPT Software Australia Pty Ltd | Contract
n
SOC Analyst
n
Melbourne, Australia | Posted on 05/19/2026
n
n
XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services company
n
XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and
Manufacturingdomains.
n
We have 120+technocrats in Australia working at our clientlocations.
n
XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
n
We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
n
n
Job Description
n
Role Summary
n
The Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments,
triagingpenetration
test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.
n
The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC,
andinfrastructure/application
teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‐ready evidence
forregulated/government
environments.
n
Key Responsibilities
n
NIST Assessment Support (CSF / NIST 800Series)
n
n
SupportNIST CSF / NIST ************************ assessments through:
n
Controlevidence collection
n
Gapanalysis support
n
Mappingtooling controls to NIST requirements
n
Assistarchitects and governance teams in preparing:
n
Controlimplementation
summaries
n
Toolcapability mapping
n
Evidencepacks for audits and client reviews
n
Trackand manage security gaps, risks, and remediation actions in line withagreed timelines
n
Supportcontinuous improvement initiatives driven by assessment outcomes
n
n
Penetration Test Findings &Remediation;
n
n
Triageand analyse application, infrastructure, and network penetration testfindings
n
Workwith platform and application teams to:
n




Prioritiseremediation
based on risk and exploitability
n
Executeor support remediation actions such as:
n
Controlenablement or enhancement
n
Trackremediation status and provide transparent closure evidence for governance andaudit forums
n
Activitiesinclude:
n
Policytuning and baseline hardening
n
Coverageand health checks
n
Supportingremediation
of vulnerabilities and misconfigurations
n
n
Support security controls across:
n
n
Ciscosecurity platforms
n
Imperva
n
MicrosoftGSA / related network security controls
n
n
Responsibilities include:
n
n
Supportingfirewall / network security rule reviews and clean‐ups
n
Assistingwith remediation of network‐related pen test findings
n
Supportingchange validation and post‐implementation checks
n
Workingwith network teams to ensure security controls align with NIST and secure‐by‐designprinciples
n
SupportSIEM and monitoring platforms:
n
Splunk
n
MicrosoftSentinel
n
Assistwith:
n
Detection coverage checks related to NIST andpen test scenarios
n
Validation that remediated controls generateexpected telemetry
n
SupportSOC teams with investigation data where required
n
Remediationactions
n
Controlchanges
n
Evidencerequired for audits and MSSR / governance reviews
n
Incident and problem reviews (P1 / P2 support)
n
Root cause analysis where control gaps areidentified
n
Followstructured change and release processes (CAB, validation, rollback awareness)
n
n
Skills &Experience;
n
n
5 years experience in security engineering / SecOps / blue teamroles
n
Exposure to NIST CSF or NIST 800 frameworks
n
Hands‐on experience supporting remediation across:
n
Endpoint /
infrastructuresecurity
tools
n
Vulnerability
managementplatforms
n
Network security controls
n
Experience working with penetration test reports and
remediationtracking
n
Familiarity with SIEM platforms (Splunk and/or Sentinel)
n
#J-*****-Ljbffr

📌 Soc Analyst (Victoria)
🏢 Xpt Software Australia
📍 Victoria