At a Glance
- Tasks: Join a cyber security team to enhance Security Operations and Incident Response.
- Company: Dynamic company focused on cutting-edge cyber security solutions.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Exciting environment with continuous learning and career advancement opportunities.
- Why this job: Make a real impact in cyber security while working with advanced technologies.
- Qualifications: 5+ years in SOC roles and strong Linux skills required.
The predicted salary is between 63000 - 77000 $ per year.
Join a growing cyber security team focused on strengthening Security Operations, Detection Engineering and Incident Response capabilities across complex enterprise environments.
Advanced Linux experience is required for this role.
Key Responsibilities
- Develop and tune detections, correlation rules and security use cases across SIEM, SOAR and EDR platforms.
- Lead incident investigations, threat hunting activities and security response efforts.
- Build and maintain security playbooks, runbooks and automated response workflows.
- Automate SOC processes using scripting and SOAR technologies to improve efficiency and reduce manual effort.
- Optimise security tooling, reduce false positives and improve overall security visibility.
- Conduct security readiness assessments, tabletop exercises and capability uplift initiatives.
- Stay across emerging threats, vulnerabilities and threat actor activity to continuously improve security controls.
- Secure and monitor Linux-based environments, ensuring strong visibility, detection coverage and incident response capability across critical infrastructure.
Skills & Experience
- 5+ years' experience in SOC, Detection Engineering, Threat Hunting or Incident Response roles.
- Strong experience with SIEM and SOAR platforms such as Splunk, Sentinel, XSOAR, Google Sec Ops, QRadar, XSIAM or similar.
- Experience with security automation (python, bash, Golang, shell etc)
- Advanced Linux administration and security experience, including log analysis, system hardening, troubleshooting, monitoring and incident response across enterprise Linux environments.
- Strong knowledge of Incident Response, Detection Engineering and Threat Hunting.
- Scripting experience with Python, Bash, Power Shell or similar.
- Understanding of MITRE ATT&CK, threat intelligence and modern attacker techniques.
- Experience tuning security tools and improving SOC effectiveness.
- Nice to Have
- Experience with Crowd Strike, Sentinel One, Defender or similar EDR platforms.
- Vulnerability Management experience.
- Experience securing cloud and containerised environments.
- Exposure to AI-driven security operations and automation.
- Relevant security certifications.
- #J-18808-Ljbffr
Senior Security Operations Engineer in Sydney employer: Confidential
At Providence Willamette Falls Medical Center, we pride ourselves on being an exceptional employer that values our caregivers as invaluable assets. With flexible scheduling options, a comprehensive benefits package starting from day one, and a culture that prioritises patient-focused care, we empower our employees to thrive both personally and professionally. Join us in a supportive environment where your voice matters and you can make a meaningful impact in the community.