Overview
Senior Security Operations Center Engineer Jobs in Brisbane, Queensland, Australia at RightSec
Title: Senior Security Operations Center Engineer
Company: RightSec
Location: Brisbane, Queensland, Australia
Company Description
RightSec was formed in 2020 by Australia’s leading information security professional, Virginia Calegare (founder of the first female-founded SOC in Australia). We are one of Australia’s fastest growing security consulting firms, offering unique opportunities to the right candidates to continue to drive our rapid growth.
We genuinely want to make a difference for the clients we serve. Everyone at RightSec is a pioneer, leading and shaping the cyber security landscape. You, as
Role Description
We are seeking a Senior SOC Specialist (detection and automation engineer) to join our advanced Security Operations Centre. This role will focus on driving detection, response, and automation engineering, leveraging Palo Alto Networks Cortex XSIAM as the foundation.
As a Senior SOC Specialist, you will be a pivotal leader in our security operations, ensuring that both automation and detection capabilities align with industry best practices. You’ll serve as a trusted advisor, working closely with clients to understand their unique security challenges, while architecting scalable, automated security solutions. You will collaborate with cross-functional teams, guiding them in best practices, and ensuring smooth transitions from legacy systems to Cortex XSIAM. Additionally, you will mentor junior SOC analysts, share insights on advanced automation, and support the continual evolution of our security architecture.
Role Description
• Participate in detection and response efforts within the SOC.
• Support investigation and resolution of support tickets pertaining to managed security solutions.
• Design and implement automation workflows to streamline incident triage and containment.
• Architect and document professional services solutions for new clients.
• Migrate clients from legacy SIEM platforms (e.g., Splunk, QRadar, LogRhythm) to Cortex XSIAM.
• Lead the deployment of automation integrations, including out of the box solutions and custom implementations.
• Support integration of various data sources into the customers chosen data management system (i.e., XSIAM and Cribl).
• Support management and customisation of Proofpoint email security gateway, CASB, and DLP solutions.
• Transition data ingestion to leverage Cribl as the primary data pipeline, ensuring optimised parsing and enrichment.
• Develop dashboards, correlations, and automations tailored to client needs.
• Handle complex data parsing when out-of-the-box solutions are not available.
• Provide professional services consulting, guiding clients through architecture design, and implementation.
• Support development of monthly report documentation and monthly client meetings.
Qualifications
• At least a Bachelors in Cybersecurity, IT, Computer Science, Engineering or equivalent experience.
• Minimum 10 years' experience in IT integration, including 5+ years in cyber security (strongly desired).
• Cribl certification and strong hands-on Cribl expertise (5+ years’ experience required).
• Experience with Palo Alto Cortex XSIAM and full Palo Alto SOC resources is highly desirable.
• Proven background working in university environments.
• Experience migrating SIEM solutions (e.g., Splunk, QRadar, LogRhythm) to XSIAM.
• Strong scripting and automation skills.
• Ability to design and implement advanced dashboards and integrations.
• Strong analytical and problem-solving skills with high attention to detail.
• Excellent communication skills (both written and spoken).
• Ability to work effectively both independently and as part of a team.
Work rights
• Must be an Australian or New Zealand citizen, or
• Have full rights to work in Australia.
Why Join us?
• Be part of the first female-founded SOC in Australia.
• Help build next-generation, AI-driven GRC tools for government and critical infrastructure.
• Hybrid career path, combing security operations and R&D innovation.
• Work in a fast-paced, pioneering cybersecurity consulting firm.
If you are driven by innovation, thrive in a complex security landscape, and are passionate about mentorship, we invite you to apply
