SOC Lead - Systems Integrator

Ready to take the next step in your career?

Join a growing Managed Security Services Provider based in Sydney, delivering cyber defence operations across a diverse client base. The organisation operates a mature Security Operations Centre with a strong focus on proactive defence, threat intelligence, and incident response rather than reactive monitoring, supporting organisations in strengthening their overall security posture.

Don’t miss out on this exciting opportunity and apply today!

Responsibilities:

• Threat Detection & Response (TDR)
  • Alert ingestion, log analysis, and triage (FP/TP/FN)
  • Advanced triage and escalation management
  • Initial containment measures including endpoint isolation
  • Technical incident support across the team
• Proactive Defence Operations (PDO)
  • Integration of tactical and strategic threat intelligence
  • Leading executive-level threat hunting activities
  • Detection engineering turning hunt findings into detection mechanisms
• Incident Response
  • Advanced triage, response, and hunting activities
  • Incident command, oversight, and management

Required Skill/Qualifications:

• Proven SOC experience with a strong technical foundation
• Experience leading or mentoring a security team
• Hands-on threat hunting and detection engineering capability
• Strong incident response background, able to command and manage under pressure
• Hands-on experience with Microsoft Defender, Microsoft Sentinel, Elastic (SIEM), and CrowdStrike
• Someone who can operate strategically and get hands-on when needed

Benefits:

• Lead role with real ownership of the SOC function
• MSSP environment exposure across multiple client environments and threat landscapes
• Standard 9 to 5 working hours with a flexible, people-first culture
• On-call rotation 1 in every 4 weeks only
• Hybrid working out of Sydney

Salary:

• Competitive salary based on experience and qualifications