SOC of the Future: Shaping human and AI collaboration in Security Operations Centres

About this project

Investigate innovative solutions to enhance collaborative intelligence

If you are passionate about building a career in the Technology, computing & AI industry sector, and are concerned about the impact of AI on cybersecurity, the University of South Australia – Australia’s University of Enterprise – is offering a hands-on project-based PhD within the UniSA STEM Unit, in partnership with OPTUS and CSIRO. 

Artificial Intelligence is revolutionising cybersecurity with a double-edged effect. While attackers leverage AI to develop increasingly sophisticated and novel attacks, defenders can also utilise AI to enhance their detection, analysis, and response capabilities. Security operations centres (SOCs) are adopting AI technologies to support security analysts, boosting their overall defensive posture.  

This project will be undertaking research that contributes to effective teaming between human and machine agents across key cybersecurity functions, improves cyber situational awareness through collaborative intelligence, and supports the evolution towards SOC of the future. It will investigate innovative solutions to enhance collaborative intelligence, leveraging human and artificial intelligence affordances, in SOC.  

The expected outcome is the development of socio-technical artifacts that leverage cyber threat intelligence for enhanced cyber situational awareness and sensemaking in SOCs. The potential benefit is faster and more effective responses to cyber threats in Australia. 

What you’ll do:  

The student in this project will undertake full-time PhD research framed across several lines of inquiry: investigating Human-AI teaming in security operations centres, developing tools for enhancing situational awareness and sensemaking in security operations centres, and formulating a roadmap for the evolution towards the "SOC of the future".  

The bulk of the primary research will be undertaken at UniSA, with 60 days (over the course of the project) of industry placement with the industry partner in this project. The student will also be expected to undertake relevant travel to local and international events and conferences.  

Where you’ll be based: 

This project is funded under the CSIRO Industry PhD Program (iPhD) which is a four-year research training program, focusing on applied research that benefits industry by solving real-world challenges. The program aims to produce the next generation of innovation leaders with the skills to work at the interface of research and industry in Australia.  

The student in this project will be part of the cybersecurity research team at UniSA and will benefit from undertaking an applied project that directly contributes to addressing the needs of the industry partner. The student will receive supervision from the industry experts who will not only provide advice on the research project but also career mentorship for a future in cybersecurity. Through the 60-day industry placement arrangement, the student will gain work experience and exposure in industry, where they will not only develop a real-world understanding of the operations of a SOC but will also have an opportunity to undertake in situ research within a world-class SOC.  

The student will also have the opportunity to work within the Australia Cyber Collaboration Centre (Aus3C) at the Lot Fourteen innovation precinct in Adelaide. Aus3C brings together over 80 companies and organisations within the cybersecurity ecosystem in Australia. Financial Support

This project is funded for reasonable research expenses. Additionally, a living allowance scholarship of $47,020 per annum is available to Australian or New Zealand citizens and Australian permanent residents. Australian Aboriginal and/or Torres Strait Islander applicants will be eligible to receive an increased stipend rate of $50,291 per annum (2024 rates). A fee-offset or waiver for the standard term of the program is also included. For full terms and benefits of the scholarship please refer to our scholarship information.

Eligibility and Selection

This project is open to applications from Australian or New Zealand citizens and Australian permanent residents. International applicants are not invited to apply at this time.

Applicants must meet the eligibility criteria for entrance into a PhD. Additionally, applicants must meet the project selection criteria: 

• Hold an Honours or Master degree in Computer Science, Information Technology, Computer Engineering or a related field
• Practical experience in cybersecurity and understanding of AI concepts
• Strong teamwork skills
• Strong work ethic and passion for cybersecurity

All applications that meet the eligibility and selection criteria will be considered for this project. A merit selection process will be used to determine the successful candidate.

The successful applicant is expected to study full-time and to be based at our Mawson Lakes campus in the north of Adelaide.

Essential Dates

Applicants are expected to start in a timely fashion upon receipt of an offer. Extended deferral periods are not available. Applications close on Sunday 19 January 2024.