Setting the SceneOur client is a leading global professional services organisation delivering technology, risk advisory and cyber security services to major organisations across Australia and internationally. Its cyber security team helps clients navigate evolving threats, strengthen security capabilities and improve resilience through advanced security solutions and managed services. The 24/7 Security Operations Centre (SOC) delivers managed detection and response services to international clients, using advanced monitoring, investigation and response capabilities to identify threats and protect critical systems and information.

The Role

As a Senior SOC Specialist (L3), you'll play a key technical and leadership role within a 24/7 Security Operations Centre. Reporting to the SOC Team Lead, you'll act as the escalation point for L1 and L2 analysts, leading complex incident investigations and providing advanced incident response expertise. You'll also lead a dedicated capability area, improving processes and detection capabilities, enhancing service delivery for high-profile clients, and collaborating on threat hunting, threat intelligence and detection engineering.

Alongside this, you'll mentor junior analysts and drive continuous improvement across SOC operations.

Key Responsibilities

- Act as the L3 escalation point for complex security incidents, providing advanced investigation and incident response support.
- Analyse and correlate security events across SIEM platforms, network intrusion detection systems and host-based security tools.
- Investigate malicious activity to identify exploited vulnerabilities, attack methods, potential impacts and threat actor behaviour.
- Identify and analyse attacker tactics, techniques and procedures (TTPs) to support effective threat detection and response.
- Collaborate with other L3 specialists on threat hunting, threat intelligence,



detection development and security monitoring improvements.
- Develop, implement and tune security detections in response to emerging threats and suspicious activity across client environments.
- Provide technical guidance, coaching and mentorship to L1 and L2 SOC Analysts, including night-shift teams.
- Lead a dedicated SOC capability area, driving process improvements and better operational outcomes for high-profile clients.
- Act as a technical point of contact for clients during incident response activities, including outside standard business hours.
- Review, document and enhance operational procedures to improve the effectiveness and maturity of security operations.
- Contribute to the continuous improvement of detection, investigation and response capabilities across the SOC.

What You'll Bring

- Demonstrated experience in a SOC environment, ideally in an L3, senior security analyst or incident response position.
- Strong experience investigating, analysing and responding to complex cyber security incidents.
- Hands-on experience with SIEM platforms, security event correlation and threat detection technologies.
- Knowledge of network intrusion detection, endpoint security and host-based security monitoring tools.
- Experience with threat hunting, threat intelligence, detection engineering and detection tuning.
- Strong understanding of attacker tactics, techniques and procedures (TTPs), intrusion methods and defensive security practices.
- Ability to provide technical leadership, mentor junior analysts and support the development of SOC capabilities.




- Experience improving security processes, operational procedures and incident response practices.
- Strong communication and stakeholder engagement skills, including the ability to communicate technical findings and response actions to clients.
- Ability to operate effectively in a rapid-paced, 24/7 security operations environment, including participation in an L3 escalation roster.
- Must be an Australian citizen and able to obtain and maintain an Australian Government security clearance at NV1 level or higher.

Experience within managed security services, large enterprise environments or complex multi-client SOC operations will be highly regarded. What's in It for You?

- $200,000 package for a permanent position.
- Approximately $10,000 additional on-call allowance, with on-call responsibilities approximately every five to six weeks.
- Join a well-established qualified services organisation with a strong cyber security practice.
- Work across complex security environments and high-profile international client engagements.
- Take ownership of incident response and contribute to advanced threat detection capabilities.
- Lead a dedicated capability area and influence the continuous improvement of SOC operations.
- Mentor and develop junior analysts while collaborating with experienced senior security specialists.
- Access professional development, coaching and leadership programs to support career progression.
- Benefit from flexible working options, wellbeing initiatives and a range of employee benefits.
- Opportunities available across major Australian cities.

How to Apply Applications are treated with absolute confidentiality. Click APPLY or contact Clodagh at [email protected] an informal conversation about your next career move. Equal opportunity and diversity are valued and encouraged.

📌 Senior SOC Specialist (Brisbane)
🏢 The Decipher Bureau
📍 Brisbane