The Security Operations Centre (SOC) team within CITEC Information Security Services, provides cyber security incident management and vulnerability management services for CITEC and its customers. This team plays a critical role in safeguarding Queensland Government systems and data against cyber threats.

This role performs as SOC Analyst Level 1, and you will be the first line of defence in the SOC team, responsible for monitoring, triaging, and investigating security alerts, as well as escalating security incidents. You will work closely with senior analysts, engineers, and other stakeholders to ensure the security and resilience of CITEC's systems and services.

This role requires a proactive and detail-oriented individual with a strong interest in cyber security, excellent analytical skills, and the ability to work effectively in a fastpaced environment.

As a SOC Analyst Level 1, you will:

• Participate in the delivery of SOC services, leveraging firewalls, intrusion detection and prevention systems, DNS, and operating systems (Linux and Windows) to protect CITEC's systems and services.
• Monitor, triage, and investigate security alerts and incidents from various sources (e.g. SIEM, EDR, network logs), taking appropriate action to resolve or escalate in accordance with established response playbooks and procedures.
• Apply threat intelligence to investigations.
• Contribute to the creation, review, and refinement of incident response playbooks to improve operational efficiency.
• Where possible, proactively search for undetected threats within the environment using various data sources, tools, and intelligence.
• Assist in vulnerability assessments, reporting, and tracking remediation efforts to ensure timely resolution of identified risks.
• Support the configuration and maintenance of security monitoring tools and technologies.
• Assist with good governance by maintaining accurate and compliant documentation, including incident reports and operational records.
• Participate in SOC team technical projects and take on additional responsibilities within Information Security Services as needed to enhance CITEC's security posture.
• Contribute to collaborative relationships with clients and other CITEC teams, striving for mutually beneficial outcomes.
• Contribute to a culture that supports and values staff.

Applications to remain current for 12 months

Job Ad Reference: QLD/654504/25

Closing Date: Friday, 29 August 2025