OUR BENEFITS
In addition to interesting, engaging opportunities that impact at scale, and ongoing personal and professional development opportunities, Thales Cyber can offer you:
* Competitive remuneration structure
* Hybrid and flexible working options under the Thales Flex program
* Paid parental leave and family support through Parents at Work
* The day off on your birthday each year
* Novated Lease options
* Ongoing personal and professional development opportunities
* Sonder – Wellbeing & Support Partner
YOUR ROLE
As a Lead SOC Security Analyst at Thales, you will play a key role in delivering managed security services from our Security Operations Centre (SOC). You will provide hands‐on technical leadership and guidance to SOC Analysts while actively monitoring, investigating, and responding to cyber security threats across client environments.
Working closely with the SOC Analytics Manager, you will support day‐to‐day SOC operations, ensure service levels are met, and contribute to the continuous improvement of security monitoring and incident response capabilities.
YOU'LL
* Provide hands‐on technical guidance and mentoring to SOC Security Analysts
* Actively monitor, analyse, and investigate security events using SIEM and associated tools
* Participate in end‐to‐end incident response activities, providing SME support where required
* Support adherence to SLAs through timely detection, analysis, and response to incidents
* Conduct targeted threat hunting to identify hidden threats and potential vulnerabilities
* Support the tuning and maintenance of SIEM alerts, correlation rules, and dashboards
* Assist with incident escalation and handover to Digital Forensics and Incident Response (DFIR) teams
* Contribute to the development and refinement of SOC procedures and playbooks
* Identify and suggest opportunities for operational improvement and automation
* Maintain awareness of emerging threats and attack techniques and share insights with the SOC team
* Assist with the preparation of incident and post‐incident customer reports
WHAT YOU'LL BRING
* Minimum 5 years' experience in cybersecurity, including at least 2 years within a SOC environment
* Strong hands‐on experience with SIEM, SOAR, and EDR technologies
* Proven experience supporting or leading security incident response activities
* Solid understanding of SOC operations, incident response, and threat intelligence workflows
* Experience providing technical guidance or mentoring to junior analysts
* Strong analytical and investigative skills, with the ability to work under pressure
* Excellent written and verbal communication skills, including incident reporting
* High attention to detail and a structured approach to security operations
* Experience with Microsoft and/or Google security tooling (desirable)
* Professional certifications such as GCIH, GSOC, CySA+, CISSP (advantageous)
As a Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.
#J-18808-Ljbffr