AWSN, in partnership with Cisco, hosted an exciting Boss of the SOC (BOTS) event at Cisco's Melbourne office, giving participants a hands-on introduction to the realities of defending organisations against cyber threats.
The immersive challenge placed attendees in the role of a Security Operations Centre (SOC) analyst, responsible for investigating and responding to a simulated cyber incident. Working within the Splunk platform, participants analysed data, followed evidence trails and pieced together the sequence of events behind a realistic attack scenario. The event was designed to reflect the pace, complexity and decision-making required in a modern SOC environment.
The room was a dynamic mix of cybersecurity practitioners, aspiring professionals, career changers and curious learners, all eager to gain practical experience in one of the industry's most critical functions. Regardless of experience level, participants embraced the challenge, demonstrating curiosity, collaboration and analytical thinking as they worked through the investigation.
A Security Operations Centre serves as the frontline of cyber defence, with analysts responsible for monitoring alerts, detecting suspicious activity, investigating threats and helping organisations respond to security incidents. SOC analysts must be able to quickly interpret large amounts of data, identify potential indicators of compromise and determine whether unusual activity represents a genuine threat. To support this work, many organisations rely on Splunk, a leading security analytics platform that allows analysts to collect, search and analyse data from across networks, applications, devices and cloud environments. In a SOC, Splunk helps analysts detect threats, investigate incidents and build a clearer understanding of how attacks unfold.
During the Boss of the SOC challenge, participants used Splunk much like a real SOC analyst would. They navigated security data, investigated suspicious events and followed clues to determine what had occurred during the simulated incident. By working directly with the platform, attendees gained valuable insight into how security operations teams use data to make informed decisions under pressure and respond effectively to threats.
One of the strengths of Boss of the SOC is its practical, scenario-based approach to learning. Rather than focusing solely on cybersecurity theory, participants had the opportunity to engage with real-world investigative workflows and industry-standard tools. The experience offered a realistic glimpse into the challenges and rewards of working in security operations while providing valuable exposure to skills that are increasingly in demand across the cybersecurity sector.
Importantly, the challenge was designed to be accessible to participants at varying stages of their cybersecurity journey. Aspiring cyber security professionals were able to explore the SOC environment in a supportive setting and gain confidence through hands-on learning. While the activity included elements of friendly competition, the overaching focus was on learning, collaboration, guided exposure and building confidence.
Events like these play a critical role in helping build Australia's future cyber workforce by creating opportunities for people to explore cybersecurity careers, develop practical skills and connect with industry professionals.
AWSN extends its sincere thanks to Cisco for hosting and partnering on the event, and whose support and expertise helped make the event a success.
Most importantly, thank you to everyone who participated. No one becomes a SOC expert in two hours, but every attendee left with greater confidence, new insights and a stronger understanding of what it takes to protect organisations in today's rapidly evolving cyber threat landscape.