At a Glance
- Tasks: Triage alerts, investigate threats, and coordinate security incidents in a dynamic environment.
- Company: Join Aurizon, Australia's largest rail freight operator with a collaborative culture.
- Benefits: Enjoy growth opportunities, mentoring programs, and discounts on health insurance and travel.
- Other info: Exciting long-term career opportunities in a diverse and supportive workplace.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: Tertiary qualification in IT/Cyber Security and SOC/IR certifications required.
The predicted salary is between 81000 - 99000 $ per year.
Aurizon Brisbane City, Queensland, Australia
About the role
- Triage and prioritise alerts, incidents, and threat intel outputs from hybrid IT/OT environments.
- Conduct in-depth investigations of suspicious activity, including OT-specific threats.
- Coordinate and escallate security incidents to specialist response teams.
- Lead initial containment and recovery actions for incidents across our environment.
- Perform root cause analysis and recommend solutions to reduce risk.
- Collaborate with the Detection Engineering team to enhance detection coverage and quality.
- Analyse the latest OT malware and vulnerabilities to bolster defences.
- Support threat hunting and proactive identification of attack vectors in OT/ICS environments.
- Maintain and enhance response playbooks, tools, and documentation.
- Participate in post-incident reviews and support continuous improvement initiatives.
- Participate in the on-call roster rotation.
About you
- A relevant tertiary qualification in IT, Software Engineering, Networking or Cyber Security (mandatory).
- One or more SOC/IR certifications (e. g., CSA, Cy SA+, GCIH, E|CIH) (mandatory).
- 2+ years’ experience in a SOC/Incident Response role.
- Proven ability to work across security incidents from detection to resolution.
- Scripting skills in Power Shell, Python or Bash (mandatory).
• Strong experience with
- Splunk (including SPL and admin tasks)
- Crowd Strike EDR
- Nozomi for OT/ICS visibility
- Windows/Linux/Unix and/or Azure administration
- Network security fundamentals
- Experience with Microsoft Sentinel (preferred).
What we offer you
- Development and growth opportunities.
- Access to mentoring and development programs.
- Discounts on selected health insurance funds, personal travel, gyms, vehicles and retail brands.
- Parental leave program and super booster.
At Aurizon, we support the development and growth of our employees. With a national portfolio of operations, we offer long-term and exciting career opportunities.
PHESx VZ6d QY
Aurizon is Australia’s largest rail freight operator and a top 100 ASX company.
Each year, we deliver more than 250 million tonnes of Australian commodities right across the country.
Aurizon is crucial to the Australian economy, connecting miners, primary producers and industry with international and domestic markets.
About Aurizon.
Look to Aurizon for a diverse and collaborative culture.
- To learn about us and our company values, please visit www. aurizon. com. au/careers
- #J-18808-Ljbffr
SOC Analyst employer: Aurizon
Aurizon is an exceptional employer that fosters a collaborative work culture where innovation and data-driven decision-making thrive. With a strong commitment to employee growth, we offer extensive professional development opportunities and the chance to work on impactful projects that shape the future of our business. Located in a vibrant area, our team enjoys a supportive environment that values diversity and encourages creative problem-solving.
