SOC Analyst

• XPT Software Australia Pty Ltd | Contract
• SOC Analyst
• Melbourne, Australia | Posted on 05/19/2026
• XPT Software Australia PTY Ltd, incorporated in 2016, is a Software Services company
• XPT works with topclients across Australia in Banking, Insurance, Telecom, Retail, Energy, Mining and Manufacturingdomains.
• We have 120+technocrats in Australia working at our clientlocations.
• XPT Software Australia is part of group companies which has globalpresence across India & Europe.
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

Job Description

Role Summary

The Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments, triagingpenetration test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.

The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC, andinfrastructure/application teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‑ready evidence forregulated/government environments.

Key Responsibilities

• NIST Assessment Support (CSF / NIST 800Series)
• Support NIST CSF / NIST 800‑53 / 800‑61 / 800‑92 assessments through:
• Controlevidence collection
• Gapanalysis support
• Mappingtooling controls to NIST requirements

• Assistarchitects and governance teams in preparing

• Controlimplementation summaries
• Toolcapability mapping
• Evidencepacks for audits and client reviews
• Trackand manage security gaps, risks, and remediation actions in line withagreed timelines
• Supportcontinuous improvement initiatives driven by assessment outcomes
• Penetration Test Findings &Remediation
• Triageand analyse application, infrastructure, and network penetration testfindings

• Workwith platform and application teams to

• Prioritiseremediation based on risk and exploitability

• Executeor support remediation actions such as

• Controlenablement or enhancement
• Trackremediation status and provide clear closure evidence for governance andaudit forums

• Activitiesinclude

• Policytuning and baseline hardening
• Coverageand health checks
• Supportingremediation of vulnerabilities and misconfigurations

Support security controls across

• Ciscosecurity platforms
• Imperva
• Microsoft GSA / related network security controls

Responsibilities include

• Supportingfirewall / network security rule reviews and clean‑ups
• Assistingwith remediation of network‑related pen test findings
• Supportingchange validation and post‑implementation checks
• Workingwith network teams to ensure security controls align with NIST and secure‑by‑designprinciples

• Support SIEM and monitoring platforms

• Splunk
• Microsoft Sentinel

• Assistwith

• Detection coverage checks related to NIST andpen test scenarios
• Validation that remediated controls generateexpected telemetry
• Support SOC teams with investigation data where required
• Remediationactions
• Controlchanges
• Evidencerequired for audits and MSSR / governance reviews
• Incident and problem reviews (P1 / P2 support)
• Root cause analysis where control gaps areidentified
• Followstructured change and release processes (CAB, validation, rollback awareness)

Skills &Experience

• 5 years experience in security engineering / Sec Ops / blue teamroles
• Exposure to NIST CSF or NIST 800 frameworks

• Hands‑on experience supporting remediation across

• Endpoint / infrastructuresecurity tools
• Vulnerability managementplatforms
• Network security controls
• Experience working with penetration test reports and remediationtracking
• Familiarity with SIEM platforms (Splunk and/or Sentinel)
• #J-18808-Ljbffr