Lead Detection Engineer - AI-Driven SOC Innovator

Talenza; Sydney; On-site; AUD 170,000 - 230,000; Full time

Job summary

Talenza is seeking a technically strong cyber professional to own a modern detection and response capability and shape next-gen AI-driven security operations. The role sits below SOC Manager and favors building, automating, and improving capabilities over mere operation.

This senior position offers significant technical ownership, leadership potential, and exposure to cutting-edge Microsoft security tooling in a mature security environment.

Qualifications

• Strong experience in Security Operations and Detection Engineering.
• Hands-on expertise across SIEM, EDR, XDR and/or SOAR technologies.
• Experience working with Microsoft security technologies, ideally Sentinel and the Defender suite.
• Strong understanding of automation, orchestration and security engineering best practices.
• Comfortable building detections, writing KQL queries and developing automated response workflows.
• A proactive and curious mindset with a passion for emerging technologies, automation and AI.
• Previous leadership, technical lead or senior-level experience within an MSSP or enterprise environment is highly regarded.
• Exposure to AWS, CrowdStrike or security data pipelines will be viewed favourably.

Responsibilities

• Lead the continuous improvement of threat detection, threat hunting and incident response capabilities.
• Act as the technical lead and SME for detection engineering and security automation initiatives.
• Own and enhance SIEM, EDR, XDR and SOAR platforms across a mature enterprise environment.
• Develop detections, threat hunting content, KQL libraries, automation playbooks and detection-as-code capabilities.
• Drive improvements through orchestration, enrichment and automation, reducing manual effort across the SOC.
• Play a key role in a major Agentic Defensive Security program, leveraging AI to transform security operations.
• Influence tooling, architecture and long-term SOC strategy while working closely with internal stakeholders and vendors.
• Take ownership of a critical security environment with the opportunity to progress into a leadership position over time.

Skills

Security operations

Detection engineering

SIEM

EDR

XDR

SOAR

Microsoft Defender

Azure Sentinel

Automation

Orchestration

KQL

Threat hunting

Incident response

AI/Automation

Leadership (senior/tech lead)

Tools

SIEM tools

EDR tools

XDR tools

SOAR platforms

Azure Sentinel

Microsoft Defender suite

Job description

Talenza is seeking a technically strong cyber professional to own a modern detection and response capability and shape next-gen AI-driven security operations. The role sits below SOC Manager and favors building, automating, and improving capabilities over mere operation.

This senior position offers significant technical ownership, leadership potential, and exposure to cutting-edge Microsoft security tooling in a mature security environment.