SOC Architect

Role: SOC Architect Salary: Competitive Length: 12 months contract Location: Brisbane CBD

What you'll do:

• Design and contribute to the development of enterprise solutions, considering business and technology strategies, enterprise planning and deployments across a range of complex business applications.
• Contribute to the development and refinement of the organisation’s SOC strategy, SIEM roadmap, and target-state architecture.
• Design and evolve enterprise SOC and SIEM architectures (e.g. Microsoft Sentinel, Splunk), aligned to business and technology strategy.
• Lead solution architecture and design for SIEM and SOC capabilities, including telemetry ingestion, detection engineering, analytics, and response workflows.
• Provide subject matter expertise across where required:
• SIEM platforms (with strong preference for Microsoft Sentinel)
• SOC operating models and maturity frameworks
• Threat detection and response capabilities
• Log ingestion and normalisation
• Detection engineering (analytics rules, correlations)
• Incident response workflows
• Automation and orchestration (SOAR)
• Translate business, threat, and compliance requirements into scalable, fit-for-purpose security solutions.
• Provide technical leadership across SIEM engineering, including KQL, analytics rules, dashboards, and platform optimisation.
• Design and implement automation and orchestration (SOAR) using tools such as Sentinel and Logic Apps.
• Integrate threat intelligence into detection and response workflows.
• Contribute to and evolve the SOC strategy, SIEM roadmap, and target-state architecture.
• Develop and maintain architecture standards, patterns, and reference designs.
• Assess current capabilities to identify gaps, risks, and uplift opportunities.
• Drive adoption of AI-enabled and Agentic SOC models, leveraging tools such as Microsoft Security Copilot.
• Lead SIEM and SOC solution delivery, including design governance, vendor/product evaluations, and implementation guidance.
• Produce high-quality architecture artefacts (conceptual, logical, and physical designs)

Essential skill required:

• Ability to lead architecture and SME resources through the design activities for proposed solutions. Design activity will include both functional and non-functional components, including software configuration, reporting, middleware/system interfaces, and infrastructure platforms.
• Understands integration of various technical platforms. Provides the business solution across all domains. Ensures the technical integrity and quality of the solution(s).
• Ability to objectively perform options analysis across complex solutions and document and present recommendations to various stakeholders.
• Demonstrate working in a project delivery environment, autonomously with strong organisation skills.
• Ability to establish, implement, and enforce appropriate IT standards to meet business requirements.
• Methodical, organised and able to prioritise, managing their own time effectively and working to deadlines.
• Specialist knowledge of information security threats, network and web protocols, security devices and operating systems.
• Proven track record as a lead Architect or Senior Engineer handling Enterprise-scale deployments transition or implementation of SIEM technologies (e.g. Splunk or MS Sentinel).

Desirable

• Bachelor’s degree in computer science, Information Systems, Business, or related field (or equivalent experience).
• Understanding of ITIL practices (incident, problem, change, and service level management).
• Knowledge of vendor management, service delivery, and contract management.
• Experience in financial services / superannuation environments, including regulatory-compliant solution design.
• Experience designing cloud-based solutions on Microsoft Azure, including AI (Agentic/Workspace), SOAR, and automation.
• Familiarity with security and governance frameworks (ISO 27001, NIST CSF, NIST 800-53).
• TOGAF certification or equivalent architecture experience.
• Relevant vendor/industry certifications (e.g. Microsoft, Cisco).
• Experience with automation and optimization technologies, including BPM and RPA platforms.

What's next:

If you are ready to make a meaningful impact on enterprise security operations while enjoying flexible benefits apply now!

Apply today by clicking on the link provided.

Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Neha Neha on 07 3032 2285 for a confidential discussion.