SOC Analyst

At Bravura Solutions, collaboration, diversity and excellence matter. We value your ideas, giving you room to be curious and innovate in an exciting, fast-paced, and flexible environment. We look for many different skills and abilities, as well as how you can add value to Bravura and our culture.

As a Global FinTech market leader and ASX listed company, Bravura is a trusted partner to over 350 leading financial services clients, delivering wealth management technology and products. We invest significantly in our technology hubs and innovation labs, which inspire and drive our creative, future-focused mindset. We take pride in developing cutting-edge, digital first technology solutions that support our clients to achieve financial security and prosperity for their customers.

About The Role

The Security Operations Analyst will support build out of our internal capability and partner closely with our outsourced SOC provider. This role focuses on incident response coordination, security monitoring, vulnerability management and remediation oversight, helping to strengthen our overall security posture through effective operational processes and active stakeholder collaboration.

You ll play a vital role in ensuring we meet both our internal security obligations and the high expectations of our financial services clients.

• Act as the in-house lead for escalations from our third-party MDR/SOC, supporting triage, investigation of alerts from the SIEM, EDR and cloud security tooling (Rapid7 InsightIDR, AWS GuardDuty/CloudTrail), and coordination of incident response

• Investigate security alerts across endpoint, identity, network and cloud environments, correlating available evidence to determine severity, business impact and appropriate response actions.

• Analyse Windows and identity-related security events, including Active Directory, Microsoft Entra ID, Kerberos and NTLM authentication activity, and coordinate investigation and remediation with relevant technical teams.

• Review network security events involving TCP/IP, DNS, firewalls, proxies, VPNs and common enterprise protocols, identifying suspicious behaviour and recommending appropriate follow-up actions.

• Escalate confirmed or complex incidents to the Senior SOC Analyst and the Rapid7 SOC. Support containment and recovery activities

• Follow established SOC runbooks and playbooks while contributing to the development, maintenance and continuous improvement of incident response runbooks, playbooks and standard operating procedures (SOPs)

To be successful in this role, your background and experience will include:

• 3-5 years experience in a security operation, incident response, or SOC analyst role (in-house or MSSP/MDR)

• Hands-on experience with an enterprise SIEM. Rapid7 InsightIDR / InsightVM preferred; Splunk, Sentinel, QRadar or equivalent accepted)

• Practical experience investigating security events in Microsoft Windows environments, with working knowledge of Active Directory, Microsoft Entra ID, Kerberos, NTLM and common authentication flows.

• Strong written and verbal communication skills, with the ability to produce clear incident summaries, document evidence, and coordinate actions with infrastructure, application, engineering, and third-party SOC teams.

• scripting/automation, cloud security experience (AWS/Azure).
• experience using approved AI-assisted security tools for alert triage, investigation, SIEM query development and reporting, with the ability to validate AI-generated outputs and handle sensitive security data appropriately.
• Industry security certifications are a bonus.

Our people are the heart of our business. We work hard to provide a rich employee with experience and a robust framework for ongoing career development.

We make hiring decisions based on your experience, skills and passion so even if you don t match every listed skill or tick all the boxes, we d still love to hear from you.

Please note that interviews are primarily conducted virtually and if you require any reasonable adjustments or would like to note which pronouns you use, please let us know.

All final applicants for this position will be asked to consent to a criminal record and background check. Please note that people with criminal records are not automatically barred from applying for this position. Each application will be considered on its merits.