Lead Cyber Operations & Threat Defense Architect

Leaders; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Leaders IT in Canberra seeks a Lead Cyber Operations Security Expert to lead complex security investigations, identify threats, and drive improvements across security operations. You will work with cyber security, infrastructure, and technology teams as a key escalation point for significant incidents.

You will provide expert guidance on modern cyber threats, defensive strategies, and cloud security controls, mentor junior team members, and produce incident reports and threat intelligence

Qualifications

• Minimum 7 years' experience in cyber security or IT, including experience operating in senior or lead-level roles.
• Proven experience leading cyber incident investigations, threat hunting, and crisis response activities.
• Strong experience with SIEM and security operations platforms such as: Microsoft Sentinel, Microsoft Defender Suite, Splunk, EDR/XDR technologies.
• Experience working within Azure and/or AWS cloud environments.
• Knowledge of Zero Trust Security Architecture principles.
• Strong understanding of vulnerability management, endpoint security, and network security.
• Experience working with threat intelligence frameworks and MITRE ATT&CK methodologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to mentor technical teams and provide cyber security leadership.

Responsibilities

• Lead the monitoring, investigation, and remediation of cyber security incidents.
• Analyse security events and identify suspicious or malicious activity across networks, endpoints, and cloud platforms.
• Conduct incident response activities, including investigations, digital forensics, and evidence management.
• Perform proactive threat hunting and threat intelligence activities.
• Develop and manage phishing simulation exercises and user awareness initiatives.
• Conduct log analysis and create dashboards, reporting, and visualisations using SIEM platforms.
• Research emerging threats, vulnerabilities, and attack techniques.
• Support the onboarding, ingestion, and normalisation of security data sources.
• Collaborate with security operations, cloud, and infrastructure teams to improve security controls.
• Act as a technical escalation point for complex cyber incidents.
• Mentor and develop junior cyber security team members.
• Produce incident reports, threat intelligence briefings, and operational security reporting.

Skills

Security leadership

Incident investigations

Threat hunting

Cloud security

SIEM platforms

Azure/AWS

Mentoring

Threat intel

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

EDR/XDR

Job description

Leaders IT in Canberra seeks a Lead Cyber Operations Security Expert to lead complex security investigations, identify threats, and drive improvements across security operations. You will work with cyber security, infrastructure, and technology teams as a key escalation point for significant incidents.

You will provide expert guidance on modern cyber threats, defensive strategies, and cloud security controls, mentor junior team members, and produce incident reports and threat intelligence