Global Security Operations Lead — Incident Response & Automation

Dentons; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Dentons is seeking a Global Security Operations Engineer to strengthen threat detection and incident response across its global environment. You will lead complex investigations, build automated detection and response capabilities, and drive a shift toward intelligence-led security operations.

Based in APAC, the role supports global coverage with regional collaboration and on-call support. The successful candidate will implement automation, work with MITRE ATT&CK mappings, and partner with

Qualifications

• This is a hands-on, senior technical role in security operations.
• Demonstrated depth in SOC, incident response, or detection engineering.
• Experience with SIEM and EDR platforms; leadership in investigations end-to-end.

Responsibilities

• Lead advanced investigations and incident response across global environments.
• Develop and optimize threat detection capabilities and automation.
• Design automated playbooks and SOAR workflows to reduce dwell time.
• Write queries and scripts (KQL, PowerShell, Python) for detection and enrichment.
• Coordinate with global teams and provide on-call escalation during incidents.
• Translate technical findings into business risk statements for leadership.

Skills

Incident response

SOC operations

Threat hunting

Automation scripting

KQL

PowerShell

Python

SOAR

MITRE ATT&CK

Networking TCP/IP

Education

Bachelor's degree in Information Security

Security certifications preferred

Tools

Microsoft Sentinel

Microsoft Defender XDR

Entra ID

Azure

EDR platforms

Job description

Dentons is seeking a Global Security Operations Engineer to strengthen threat detection and incident response across its global environment. You will lead complex investigations, build automated detection and response capabilities, and drive a shift toward intelligence-led security operations.

Based in APAC, the role supports global coverage with regional collaboration and on-call support. The successful candidate will implement automation, work with MITRE ATT&CK mappings, and partner with