Lead Incident Commander for AI-Driven SOC (Hybrid)

Xero; Melbourne; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

Xero in Melbourne is seeking a Senior Security Operations Analyst to lead incident response, shape our SOC with AI-assisted workflows, and drive automation that reduces repetitive work while increasing resilience. You’ll own complex investigations, coordinate stakeholders, and ensure learnings translate into better detections, runbooks, and training across teams.

Based in a hybrid model, you’ll collaborate with a global Response cohort, mentor junior analysts, and help design guardrails for

Qualifications

• Solid experience in security operations and incident response.
• Track record leading complex investigations to resolution.
• Knowledge of attack and defence techniques in cloud/SaaS environments.
• Confidence writing queries in a SIEM or log platform.
• Clear, calm communication and willingness to share knowledge.

Responsibilities

• Lead complex investigations and act as Incident Commander for medium/high impact incidents.
• Run post incident reviews that drive real changes in detections and training.
• Build automations and AI-assisted workflows with guardrails and sign-off where needed.
• Collaborate with Product Manager and Security Operations Managers on initiatives.
• Turn threat intelligence into practical actions for Xero.

Skills

Incident response

Security operations

Investigation leadership

Cloud security

SaaS security

SIEM queries

Python scripting

SOAR automation

AI tools in security

Tines

Tools

Tines

Job description

Xero in Melbourne is seeking a Senior Security Operations Analyst to lead incident response, shape our SOC with AI-assisted workflows, and drive automation that reduces repetitive work while increasing resilience. You’ll own complex investigations, coordinate stakeholders, and ensure learnings translate into better detections, runbooks, and training across teams.

Based in a hybrid model, you’ll collaborate with a global Response cohort, mentor junior analysts, and help design guardrails for