Lead Cyber Defense & Incident Response Architect

Talenza; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Talenza is seeking an experienced Lead Cyber Security Analyst to protect enterprise systems in a hybrid Sydney environment. Reporting to the Cyber Operations Manager, this hands-on role leads incident response, threat hunting, and the ongoing maturity of a hybrid SOC.

You will act as the technical deputy, lead investigations during security incidents, and shape defence strategy across a large enterprise. The role requires deep expertise with SIEM, EDR/XDR, MITRE ATT&CK and the development of

Qualifications

• Extensive experience in cyber security operations within a large enterprise environment.
• Hands-on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of MITRE ATT&CK and modern threat techniques.
• Experience developing detection content and incident response playbooks.

Responsibilities

• Lead the technical investigation, containment, eradication and recovery of incidents.
• Act as the primary technical escalation point for complex events.
• Provide technical oversight of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK.
• Develop and enhance detection rules and monitoring capabilities.
• Refine incident response playbooks and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats and industry trends to continually improve cyber defence capability.

Skills

Cyber operations

Incident response

Threat hunting

Threat detection

SIEM

EDR/XDR

MITRE ATT&CK

Detection content

Playbooks

Operational procedures

Tools

SOAR

SIEM

EDR/XDR

Job description

Talenza is seeking an experienced Lead Cyber Security Analyst to protect enterprise systems in a hybrid Sydney environment. Reporting to the Cyber Operations Manager, this hands-on role leads incident response, threat hunting, and the ongoing maturity of a hybrid SOC.

You will act as the technical deputy, lead investigations during security incidents, and shape defence strategy across a large enterprise. The role requires deep expertise with SIEM, EDR/XDR, MITRE ATT&CK and the development of