Squad Lead - Cyber Threat Defence
- Docklands, VIC
- Permanent
- Full-time
- Leading the development and implementation of advanced threat detection technologies, incident response protocols, and security automation.
- Overseeing threat intelligence, vulnerability management, behavioural analytics, malware defence, and SOC operations.
- Ensuring rapid and effective response to cyber incidents, aligned with frameworks such as ACSC Essential Eight, ISO 27001, APRA CPS 234, and the Australian Privacy Principles (APPs).
- Continuously tuning detection use cases and integrating cyber defence into broader enterprise risk management.
- Acting as the frontline guardian-detecting, analysing, and neutralising threats before they impact our members, data, or systems.
- 10+ years of experience in cyber security, with a strong focus on cyber threat detection, incident response, and threat intelligence.
- Demonstrated leadership in building and managing advanced cyber defence functions including SOC operations, threat hunting, red teaming, and detection engineering.
- Extensive hands-on experience with key threat defence technologies such as SIEM (e.g., Splunk, Microsoft Sentinel), SOAR platforms, EDR/XDR (e.g., CrowdStrike, Defender for Endpoint), and threat intelligence platforms.
- Proven expertise in security operations within cloud environments (AWS, Azure), including cloud-native threat detection and response capabilities.
- Strong stakeholder management skills, with the ability to translate technical risk into business impact for non-technical audiences and executive stakeholders.
- High analytical and mature problem-solving skills.
- Excellent communication skills, both written and verbal.
- Deep understanding of security frameworks and threat modelling approaches, including MITRE ATT&CK, NIST 800-61, ASD Essential Eight, and cyber kill chain methodology.
- Experience leading cyber incident response efforts, including playbook development, root cause analysis, and post-incident review and improvement.
- Relevant industry certifications such as CISSP, GIAC (e.g., GCIA, GCIH, GDAT), OSCP, or equivalent that reflect strong capabilities in cyber operations, threat intelligence, and technical leadership.