Security Operations Engineer | SOC Operations, Incident Response, Threat Hunting >> cyber security & engineering services

YOUR NEW JOB

As a Security Operations Engineer, you will support Security Operations Centre (SOC) activities, including security monitoring, incident investigation, threat hunting, and incident response.
You will act as a Level 2 security analyst, investigating alerts, identifying threats, supporting remediation activities, and improving overall security operations.
This is a 12-month renewable contract role. Work will be onsite at One-North, Mon – Fri office hours.

WHAT YOU’LL BE DOING

• Investigate and triage security alerts from SIEM, EDR/XDR, email, cloud, identity, and network security platforms
• Analyse security events to determine root cause, scope, and business impact
• Investigate phishing, malware, account compromise, and unauthorized access incidents
• Perform threat hunting activities using threat intelligence and MITRE ATT&CK methodologies
• Support containment, remediation, and recovery activities during security incidents
• Improve SOC processes, playbooks, detection rules, and monitoring capabilities
• Assist with onboarding and integration of new security technologies
• Support security reporting and documentation activities
• Participate in after-hours support when required

WHAT IS NEEDED FROM YOU

• At least 3 years of SOC, cyber security operations, or incident response experience
• Hands-on experience with SIEM, EDR/XDR, cloud security, or identity security platforms
• Strong understanding of cyber attack techniques, threat analysis, and MITRE ATT&CK
• Experience investigating and responding to security incidents independently
• Good analytical, troubleshooting, and problem-solving skill• Strong communication and documentation skills

WHAT WILL MAKE YOU STAND OUT

• Experience working in government, statutory board, or public sector environments
• Experience with threat hunting and advanced incident investigations
• Exposure to security automation, detection engineering, or SOC optimisation projects
• Relevant certifications such as Security+, CySA+, GCIH, GCIA, CEH, SC-200, or equivalent