SOC Analyst

SOC Analyst

Melbourne, Australia Posted on 05/19/2026

Job Description Role Summary

The Cyber Security Engineer is responsible for supporting NIST CSF / NIST 800 assessments, triaging penetration test findings, and driving remediation activities across application, infrastructure, network security, and monitoring platforms.

The role is hands-on and delivery-focused, working closely with architects, platform owners, SOC, and infrastructure/application teams to translate security findings into actionable fixes, validate control effectiveness, and support audit-ready evidence for regulated/government environments.

Key Responsibilities NIST Assessment Support (CSF / NIST 800 Series)

• Support NIST CSF / NIST 800-53 / 800-61 / 800-92 assessments through:
• Control evidence collection
• Gap analysis support
• Mapping tooling controls to NIST requirements
• Assist architects and governance teams in preparing:
• Control implementation summaries
• Tool capability mapping
• Evidence packs for audits and client reviews
• Track and manage security gaps, risks, and remediation actions in line with agreed timelines
• Support continuous improvement initiatives driven by assessment outcomes

Penetration Test Findings & Remediation

• Triage and analyze application, infrastructure, and network penetration test findings
• Work with platform and application teams to:
• Prioritize remediation based on risk and exploitability
• Execute or support remediation actions such as:
• Control enablement or enhancement
• Track remediation status and provide clear closure evidence for governance and audit forums
• Activities include:
• Policy tuning and baseline hardening
• Coverage and health checks
• Supporting remediation of vulnerabilities and misconfigurations

Support security controls across:

• Cisco security platforms
• Imperva
• Microsoft GSA / related network security controls

Responsibilities include:

• Supporting firewall / network security rule reviews and clean-ups
• Assisting with remediation of network-related pen test findings
• Supporting change validation and post-implementation checks
• Working with network teams to ensure security controls align with NIST and secure-by-design principles
• Support SIEM and monitoring platforms:
• Splunk
• Microsoft Sentinel
• Assist with:
• Detection coverage checks related to NIST and pen test scenarios
• Validation that remediated controls generate expected telemetry
• Support SOC teams with investigation data where required
• Remediation actions
• Control changes
• Evidence required for audits and MSSR / governance reviews
• Incident and problem reviews (P1 / P2 support)
• Root cause analysis where control gaps are identified
• Follow structured change and release processes (CAB, validation, rollback awareness)

Skills & Experience

• 5 years experience in security engineering / SecOps / blue team roles
• Exposure to NIST CSF or NIST 800 frameworks
• Hands-on experience supporting remediation across:
• Endpoint / infrastructure security tools
• Vulnerability management platforms
• Network security controls
• Experience working with penetration test reports and remediation tracking
• Familiarity with SIEM platforms (Splunk and/or Sentinel)