Lead Cyber Operations Security Expert

Peoplebank; Brisbane; On-site; AUD 180,000 - 260,000; Full time

Job summary

Peoplebank is seeking a Lead Cyber Operations Security Expert in Brisbane to lead complex security investigations and threat intelligence programs. You will work with Cyber security, IT, and Infrastructure teams, acting as a senior escalation point for major incidents and guiding defensive strategies.

The role requires hands-on experience in SIEM platforms and cloud environments (Azure/AWS), plus strong leadership and communication skills to mentor junior staff and drive security improvements

Qualifications

• Minimum 7 years in cyber security or IT.
• Experience leading cyber incident investigations, threat hunting, and crisis response activities.
• Strong experience with SIEM and security operations platforms such as Microsoft Sentinel, Microsoft Defender, Splunk.
• Experience working within Azure and/or AWS cloud environments.
• Knowledge of Zero Trust Security Architecture principles.
• Strong understanding of vulnerability management, endpoint security, and network security.
• Experience with threat intelligence frameworks and MITRE ATT&CK methodologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to mentor technical teams and provide cyber security leadership.

Responsibilities

• Lead the monitoring, investigation, and remediation of cyber security incidents.
• Analyse security events and identify suspicious or malicious activity across networks, endpoints, and cloud platforms.
• Conduct incident response activities, including investigations, digital forensics, and evidence management.
• Perform proactive threat hunting and threat intelligence activities.
• Develop and manage phishing simulation exercises and user awareness initiatives.
• Conduct log analysis and create dashboards, reporting, and visualisations using SIEM platforms.
• Research emerging threats, vulnerabilities, and attack techniques.
• Support the onboarding, ingestion, and normalisation of security data sources.
• Collaborate with security operations, cloud, and infrastructure teams to improve security controls.
• Act as a technical escalation point for complex cyber incidents.
• Mentor and develop junior cyber security team members.
• Produce incident reports, threat intelligence briefings, and operational security reporting.

Skills

Incident investigations

Threat hunting

Crisis response

Cyber security leadership

Cloud security

Azure/AWS

MITRE ATT&CK

Excellent communication

Mentoring

Tools

Microsoft Sentinel

Microsoft Defender Suite

Splunk

EDR/XDR

Azure

AWS

Job description

About the Role As the Lead Cyber Operations Security Expert, you will be responsible for leading complex security investigations, proactively identifying cyber threats, and driving improvements across security operations capability.
Working closely with cyber security, infrastructure, and technology teams, you will serve as a key escalation point for significant incidents and provide expert guidance on modern cyber security threats, defensive strategies, and cloud security controls.
Key Responsibilities

• Lead the monitoring, investigation, and remediation of cyber security incidents.
• Analyse security events and identify suspicious or malicious activity across networks, endpoints, and cloud platforms.
• Conduct incident response activities, including investigations, digital forensics, and evidence management.
• Perform proactive threat hunting and threat intelligence activities.
• Develop and manage phishing simulation exercises and user awareness initiatives.
• Conduct log analysis and create dashboards, reporting, and visualisations using SIEM platforms.
• Research emerging threats, vulnerabilities, and attack techniques.
• Support the onboarding, ingestion, and normalisation of security data sources.
• Collaborate with security operations, cloud, and infrastructure teams to improve security controls.
• Act as a technical escalation point for complex cyber incidents.
• Mentor and develop junior cyber security team members.
• Produce incident reports, threat intelligence briefings, and operational security reporting.

Skills & ExperienceTo be successful, you will demonstrate:

• Minimum 7 years' experience in cyber security or IT, including experience operating in senior or lead-level roles.
• Proven experience leading cyber incident investigations, threat hunting, and crisis response activities.
• Strong experience with SIEM and security operations platforms such as:
  • Microsoft Sentinel
  • Microsoft Defender Suite
  • Splunk
  • Endpoint Detection and Response (EDR/XDR) technologies
• Experience working within Azure and/or AWS cloud environments.
• Knowledge of Zero Trust Security Architecture principles.
• Strong understanding of vulnerability management, endpoint security, and network security.
• Experience working with threat intelligence frameworks and MITRE ATT&CK methodologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to mentor technical teams and provide cyber security leadership.

Highly Regarded

• Experience with digital forensics and incident handling frameworks.
• Knowledge of the Information Security Manual (ISM).
• Experience implementing NIST, ISO 27001, or Essential Eight controls.
• Relevant certifications such as:
  • CISSP
  • GIAC Certifications
  • Azure Security Certifications
  • AWS Security Certifications
  • Splunk Certifications
  • Microsoft Security Certifications

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don\'t transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .