Security Operations Lead: 24/7 MDR & Incident Response

Sharp & Carter; Melbourne; Hybrid; AUD 140,000 - 180,000; Full time

Job summary

Sharp & Carter in Melbourne is seeking an experienced Security Operations Lead to drive hands-on technical leadership within our growing cyber security function. The role combines incident response, detection engineering and security operations leadership, with a focus on Microsoft Sentinel, Defender XDR and managed detection and response services.

You will mentor SOC analysts, support day‑to‑day operations and drive continuous improvement across security monitoring, detection and incident

Qualifications

• Minimum five years in cyber security or SOC operations.
• Experience as Senior SOC Analyst, L3 Analyst or tech lead.
• Hands-on incident response, threat detection and investigations.
• Experience in 24x7 SOC or MDR environment.
• Strong knowledge of Microsoft Sentinel, Defender XDR, Entra ID and Azure security.
• Strong KQL skills and automation experience with SOAR and Logic Apps.
• Familiarity with MITRE ATT&CK, NIST IR, Essential Eight and ISO 27001.
• Excellent communication and mentoring abilities.

Responsibilities

• Provide hands-on technical leadership across security operations and incident response.
• Lead Level 2/3 security investigations and response activities.
• Support 24x7 MDR service delivery and continuous improvement.
• Develop and optimise detection capabilities across Microsoft Sentinel and Defender XDR.
• Create/refine KQL queries, detection rules and automated response workflows.
• Leverage SOAR and Azure Logic Apps to streamline operations.
• Mentor SOC analysts and coordinate across teams.
• Identify opportunities to improve detection coverage and service performance.

Skills

SOC operations

Incident response

Technical leadership

Mentoring

Communication

Tools

Microsoft Sentinel

Defender XDR

Azure

KQL

SOAR

Azure Logic Apps

MITRE ATT&CK

NIST

ISO 27001

Job description

Sharp & Carter in Melbourne is seeking an experienced Security Operations Lead to drive hands-on technical leadership within our growing cyber security function. The role combines incident response, detection engineering and security operations leadership, with a focus on Microsoft Sentinel, Defender XDR and managed detection and response services.

You will mentor SOC analysts, support day‑to‑day operations and drive continuous improvement across security monitoring, detection and incident