CyberCX - Team Lead - Managed Security Operations

CyberCX, Part of Accenture; Melbourne; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

18 weeks paid parental leave

Flexible work arrangements

Structured career development program

Local and international career机会

Job summary

CyberCX, part of Accenture, is seeking a Team Lead, Security Operations to guide a small team of Security Analysts within our Managed Security Operations Centre in Melbourne. The role blends hands-on security work with people leadership to deliver high-quality incident response and day-to-day operations across multiple customer environments.

The ideal candidate brings senior SOC experience, strong leadership, and the ability to mentor analysts while coordinating delivery, reporting, and customer

Qualifications

• Experience in a Security Operations Centre, Managed Security Service Provider, MDR environment or complex enterprise security operations.
• Proven incident investigations using SIEM, EDR/XDR and other telemetry.
• Ability to interpret security logs and identify suspicious activity.
• Experience with cloud security telemetry (AWS, Azure) and related tools.
• Experience tuning or developing detection logic while reducing false positives.
• Strong incident triage, investigation, containment and escalation skills.
• Mentoring or leading Security Analysts; leadership is advantageous.
• Clear technical guidance while supporting team confidence and decisions.
• Strong communication with technical and non-technical stakeholders.

Responsibilities

• Lead, coach and develop a team of Security Analysts for ongoing career growth.
• Act as escalation point for complex investigations and high-severity incidents.
• Oversee day-to-day delivery of managed security services across customer environments.
• Ensure accurate and timely customer reporting and service delivery.
• Coordinate workload, delegation and quality assurance within the team.
• Manage rostering and participate in on-call rotations.
• Support investigations and containment of security incidents as needed.
• Work with telemetry data to guide investigations and mentor analysts.
• Contribute to development and tuning of detections tailored to customers.
• Assist onboarding of new customers and technologies into the MSSO.
• Build strong relationships with customers and internal teams.

Skills

Security Operations Center

Incident investigation (SIEM/EDR/XDR)

Cloud security telemetry

Detection logic tuning

Incident triage and containment

Mentoring and leadership

Customer and stakeholder communication

On-call / shift management

Tools

AWS CloudTrail

GuardDuty

Azure Entra logs

Job description

The work we do matters

CyberCX, part of Accenture, protects and defends our customers and communities by providing the most comprehensive range of cyber security professional services in the region.

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Find out more about us at www.accenture.com.

About The Role

We are looking for a Team Lead, Security Operations to join our Managed Security Operations Centre and lead a small team of Security Analysts supporting a portfolio of customer environments.

This is a hands-on, first-line leadership role suited to either an experienced SOC Team Lead or a strong Senior Security Analyst ready to take the next step into formal people leadership. You will combine technical security operations experience with coaching, customer engagement and operational ownership, ensuring your team is supported to deliver high-quality outcomes across incident response, detection and day-to-day security operations.

You will remain close to the technology and act as a trusted escalation point during complex investigations, while taking ownership of your team’s development, customer deliverables and the overall performance of the squad.

What You Will Be Doing

• Lead, coach and develop a team of Security Analysts, providing regular feedback, mentoring and support for their ongoing career and capability development
• Act as a senior technical and operational escalation point for complex security investigations and higher‑severity incidents
• Oversee the day-to‑day delivery of managed security services across a portfolio of customer environments
• Ensure customer reporting, operational deliverables and service commitments are completed accurately and on time
• Coordinate and prioritise work across the team, including delegation, technical quality assurance and workload management
• Manage team rostering and participate in the on‑call rotation supporting out‑of‑hours security operations
• Support the investigation and containment of security incidents, including identifying when dedicated incident response or DFIR support should be engaged
• Work with security telemetry and event data to guide investigations and support analysts through complex technical scenarios
• Contribute to the development, tuning and ongoing maintenance of security detections, particularly where customer‑specific technologies or use cases require tailored coverage
• Support the onboarding of new customers, technologies and security capabilities into the managed service
• Build strong relationships with customers and internal teams, translating technical findings into clear actions and business outcomes
• Drive continuous improvement across security operations, team processes and customer service delivery

Skills & Experience

• Strong experience working within a Security Operations Centre, Managed Security Service Provider, MDR environment or complex enterprise security operations function
• Demonstrated experience investigating security incidents using SIEM, EDR/XDR and other security telemetry
• Strong understanding of security event logs and the ability to interpret raw telemetry to identify suspicious or malicious activity
• Experience working with cloud security telemetry such as AWS CloudTrail, GuardDuty, Azure/Entra logs or similar platforms
• Experience developing, tuning or maintaining detection logic and reducing false positives while preserving meaningful security coverage
• Strong understanding of incident triage, investigation, containment and escalation processes
• Previous experience mentoring, coaching or providing technical leadership to Security Analysts; formal people management experience is advantageous but not essential
• Ability to provide clear technical guidance while helping team members build confidence and make sound independent decisions
• Strong customer and stakeholder communication skills, including the ability to explain complex security issues to technical and non‑technical audiences
• Sound judgement under pressure and the ability to balance incidents, customer commitments, team priorities and operational deadlines
• A collaborative and accountable leadership style, with a genuine interest in developing people and improving team performance
• Willingness to participate in an on‑call roster as part of the managed security operations model

Please note that due to the nature of this role, it is a mandatory requirement that all applicants are Australian citizens with the ability to hold an Australian Government Security Clearance.

Benefits of working at Accenture

• 18 weeks paid parental leave
• Long & short‑term career break opportunities
• Structured career development program
• Local and international career opportunities.
• Certified as a Family Inclusive Workplace™
• Flexible Work Arrangements - centered around Accenture’s Truly Human ethos and our commitment to supporting the health and wellbeing of our people.
• We are proud to be in the top 3 of last year’s Diversity & Inclusion Index!

All our consulting professionals receive comprehensive training covering business acumen, technical and professional skills development. You’ll also have opportunities to hone your functional skills and expertise in an area of specialization. We offer a variety of formal and informal training programs at every level to help you acquire and build specialized skills faster. Learning takes place both on the job and through formal training conducted online, in the classroom, or in collaboration with teammates. The sheer variety of work we do, and the experience it offers, provide an unbeatable platform from which to build a career.

Accenture is a an EEO and Affi…

Equal Employment Opportunity Statement for Australia

At Accenture, we recognise that our people are multi-dimensional, and we create a work environment where all people feel like they can bring their authentic selves to work, every day.

Our unwavering commitment to inclusion and diversity unleashes innovation and creates a culture where everyone feels they have equal opportunity. Our range of progressive policies support flexibility in ‘where’, ‘when’ and ‘how’ our people work to ensure that Accenture is an organisation where you can strive for more, achieve great things and maintain the balance and wellbeing you need.

We encourage applications from all people, and we are committed to removing barriers to the recruitment process and employee lifecycle. All employment decisions shall be made without regard to age, disability status, ethnicity, gender, gender identity or expression, religion or sexual orientation and we do not tolerate discrimination. If you require adjustments to the recruitment process or have a preferred communication method, please email [e-mail] and cite the relevant Job Number, or contact us on [phone].

To ensure our workplace is inclusive and diverse we are setting bold goals and taking comprehensive action. To achieve these goals, we collect information that allows us to track the effectiveness of our Inclusion and Diversity programs. Learn how Accenture protects your personal data and know your rights in relation to your personal data. Read more about our Privacy Statement.