- XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
- XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
- We have 120+technocrats in Australia working at our clientlocations.
- XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
- We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
Role Summary
The Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments, triagingpenetration test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.
The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC, andinfrastructure/application teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‐ready evidence forregulated/government environments.
Key Responsibilities
NIST Assessment Support (CSF / NIST 800Series)
- SupportNIST CSF / NIST 800‐53 / 800‐61 / 800‐92 assessments through:
- Controlevidence collection
- Gapanalysis support
- Mappingtooling controls to NIST requirements
- Assistarchitects and governance teams in preparing:
- Controlimplementation summaries
- Toolcapability mapping
- Evidencepacks for audits and client reviews
- Trackand manage security gaps, risks, and remediation actions in line withagreed timelines
- Supportcontinuous improvement initiatives driven by assessment outcomes
Penetration Test Findings &Remediation
- Triageand analyse application, infrastructure, and network penetration testfindings
- Workwith platform and application teams to:
- Prioritiseremediation based on risk and exploitability
- Executeor support remediation actions such as:
- Controlenablement or enhancement
- Trackremediation status and provide clear closure evidence for governance andaudit forums
- Activitiesinclude:
- Policytuning and baseline hardening
- Coverageand health checks
- Supportingremediation of vulnerabilities and misconfigurations
Support security controls across:
- Ciscosecurity platforms
- Imperva
- MicrosoftGSA / related network security controls
Responsibilities include:
- Supportingfirewall / network security rule reviews and clean‐ups
- Assistingwith remediation of network‐related pen test findings
- Supportingchange validation and post‐implementation checks
- Workingwith network teams to ensure security controls align with NIST and secure‐by‐designprinciples
- SupportSIEM and monitoring platforms:
- Splunk
- MicrosoftSentinel
- Assistwith:
- Detection coverage checks related to NIST andpen test scenarios
- Validation that remediated controls generateexpected telemetry
- SupportSOC teams with investigation data where required
- Remediationactions
- Controlchanges
- Evidencerequired for audits and MSSR / governance reviews
- Incident and problem reviews (P1 / P2 support)
- Root cause analysis where control gaps areidentified
- Followstructured change and release processes (CAB, validation, rollback awareness)
Skills &Experience
- 5 years experience in security engineering / SecOps / blue teamroles
- Exposure to NIST CSF or NIST 800 frameworks
- Hands‐on experience supporting remediation across:
- Endpoint / infrastructuresecurity tools
- Vulnerability managementplatforms
- Network security controls
- Experience working with penetration test reports and remediationtracking
- Familiarity with SIEM platforms (Splunk and/or Sentinel)
SOC Analyst in Melbourne employer: XPT Software
XPT Software is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the field of AI governance. Located at the heart of Defence operations, employees benefit from unique opportunities to engage with industry leaders and contribute to meaningful projects that enhance national security. With a strong focus on professional development, XPT Software supports employee growth through continuous learning and mentorship, making it an ideal place for those looking to make a significant impact in their careers.
