Expression of Interest Security Operations Technical Specialist

About the job Expression of Interest_ Security Operations Technical Specialist

**We Are Fujitsu**

We use technology to make happier lives. We are a global leader in technology and business solutions that transform organizations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers.

**About the Role**

We are seeking a Security Operations Technical Specialist to work in a small team to develop and deliver capabilities for use by the Cyber Security Operations Centre (CSOC) and IRteam. The capabilities include uplift tasks, process engineering, and large enterprise scale cyber security solutions.
- You will deliver key capability to support the customers cyber security posture; monitoring and responding to alerts, uplift Cyber Operations procedures, respond to incidents, and support the team in cyber security incidents that impact the customer.
- You will be responsible for providing technical advice on identifying, analysing, and responding to cybersecurity incidents, as well as creating, editing, and maintaining comprehensive technical documentation related to cybersecurity policies, procedures, and systems.
- This dual role requires a deep understanding of cybersecurity threats, incident response methodologies, and the ability to translate complex technical information into clear, concise, and user-friendly information.

Canberra location preferred but flexible across east coast of Australia.

**Responsibilities**:

- Demonstrated experience in developing and implementing SOC tools, processes, and capabilities in a fast-paced environment.
- Proven automation experience Advanced Incident Response demonstrated ability to respond to a major incident.
- Proven experience in a fast-paced SOC environment.
- Experience with cloud security tooling and cloud platforms (SIEM, SOAR, Vulnerability Management, Endpoint Security, AWS, Azure, O365).
- Update and execute incident response plans. Coordinate with internal and external stakeholders to contain and mitigate incidents. Review and enhance incident response procedures and tools. Participate in regular training and simulations to improve response capabilities.
- Maintain high-quality documentation, including user manuals, system specifications, technical guides, FAQs, and security policies.
- Work closely with other cyber security teams, including threat analysts, penetration testers, and security architects, to strengthen overall security posture.
- Translate intricate cybersecurity concepts into easily understandable content for both technical and non-technical audiences.
- Stay updated with the latest cybersecurity trends and technologies to ensure documentation is accurate and relevant.
- Stay updated with the latest threat intelligence and incorporate it into incident response strategies.

**Requirements and Experience**
- Demonstrated experience in developing and implementing SOC tools, processes, and capabilities in a fast-paced environment.
- Proven automation experience
- Advanced Incident Response demonstrated ability to respond to a major incident.
- Proven experience in a fast-paced SOC environment.
- Experience with cloud security tooling and cloud platforms (SIEM, SOAR, Vulnerability Management, Endpoint Security, AWS, Azure, O365)
- Update and execute incident response plans. Coordinate with internal and external stakeholders to contain and mitigate incidents. Review and enhance incident response procedures and tools. Participate in regular training and simulations to improve response capabilities.
- Maintain high-quality documentation, including user manuals, system specifications, technical guides, FAQs, and security policies.
- Work closely with other cybersecurity teams, including threat analysts, penetration testers, and security architects, to strengthen overall security posture.
- Translate intricate cybersecurity concepts into easily understandable content for both technical and non-technical audiences.
- Stay updated with the latest cybersecurity trends and technologies to ensure documentation is accurate and relevant.
- Stay updated with the latest threat intelligence and incorporate it into incident response strategies.
- Australian Citizenship is mandatory. Current or reinstatable AGSVA NV1 Security clearance is preferred.

**Why Fujitsu?**

We are an organization with a strong set of values and a history of respecting fairness and equality, whilst promoting diversity, equity, and inclusion. We constantly push ourselves to do better and strive to bring together a diverse mix of perspectives and talents in an inclusive environment, where we encourage our people to bring their full selves to work. We call this Be Completely You.
- **We put people first. We believe in the power of diversity to drive innovation and our AWEI (Australian Workplace Equality Index) Gold Employer status, and Rainbow Tick certification for LGBTI+ inclus