Senior Security Operations Analyst

Leidos has a long serving history with Defence to provide mature cyber capability to support Australia's Defence mission. We are seeking experienced and security focused people to ensure its success.

If you want the following as part of your next role, please get in touch:

• Important and engaging work
• Leading edge technology
• Excellent training and career development
• Generous salaries at comparable market rates
• Energetic and focused high performing team
• Work with experienced peers on a well-resourced operation supporting the ADF
• Contribute to enhancing national security

This position as a SOC Senior Security Operations Analyst will see you leading a 24/7 Monitoring, Detection and Response teams. Responsible for leading, mentoring and providing the conduct of initial triage management and recommending actions to resolve incidents with minimal guidance.

Reporting directly to Senior Security Operations Lead, you will have the opportunity to help shape and develop our high-performing MDR team as they conduct their vital function in protecting critical Defence systems.

The role requires someone who is comfortable with some ambiguity, and is comfortable making decisions with limited oversight, as well as collaborating and engaging positively with other service providers and multiple areas of Defence.

The SOC is a 24x7x365 operation, operating multiple MDR shift teams across a rotating shift roster. This role will require you to encourage and lead a SOC MDR shift team, work closely with internal SOC teams and engaging with cross-functional teams on regular occasions in supporting our customer in their mission. You will also have additional tasks providing recommendations and working with Cyber Threat Intelligence, Threat Hunt and Threat detection Analyst for process and control improvements within the SOC.

About You and What You'll Bring

This role focuses on the delivery of SOC MDR services including:

• Lead a MDR Shift Team on a rotating shift roster
• Conduct initial Incident Triage
• Ensuring your team is kept engaged and productive
• Providing leadership and mentoring to your team and other SOC members alike
• Liaise and collaborate with other teams to deliver continual service improvements
• Continuous improvement of services through people process and technology
• Providing reporting and quality assurance to SOC leadership
• Maintaining security assurance through sound judgement, analytical, written and verbal communication skills

You will need to have most of the following:

• Experience in leading cybersecurity teams, with a primary focus in conducting digital forensics and incident response disciplines
• Analyse information and events from SOC toolsets, applying the appropriate controls based on current processes
• Experience with incident investigation and management frameworks and methodologies
• Ability to concisely communicate with people of varying cyber knowledge
• Experience in a team lead role within a large multi-team environment
• Understanding of the contemporary cybersecurity environment
• Demonstrable experience mentoring and developing junior team members through their cybersecurity journeys
• Help the SOC Team in continual improvement of its processes, developing improvement recommendations
• Over 5 years in IT industry
• Desired 3+ years working in Cyber Security industry
• Proven experience and knowledge of Splunk, Trellix and SOAR a must
• Strong working knowledge of Operating Systems, Applications, IP-Voice and networking devices
• Bachelor Degree in the one of the ITC areas
• Certifications in Splunk and SOAR
• Cyber related certifications desirable

This role does require the successful applicant to be an Australian Citizen and hold an NV-2 security clearance. If you have an active NV-1 and can upgrade you will also be considered. This role can only be performed on-site in Canberra.

At Leidos, you’ll enjoy 12 weeks’ paid parental leave as a primary carer, flexible work practices, discounted health insurance, novated leasing and more. Foster your career through complete access to learning and development and mentoring opportunities, we have a strong track record of internal promotion and career transitions. 

As a business we are focusing on setting people up for growth and success, so individuals can develop specialist skills and make significant contributions whilst broadening their experience within the cyber security field.  If this sounds like you and you have the right attitude coupled with the willingness to challenge yourself and want to be in a team delivering security capability for government – apply today.

We embrace diversity and are committed to creating a truly inclusive workplace. We welcome and encourage applications from Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups.