Security Operations Lead | 24/7 SOC | Sentinel & XDR

Sharp & Carter; Melbourne; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

Sharp & Carter is seeking an experienced Security Operations Lead in Melbourne with hands‑on technical leadership to drive incident response, detection engineering, and 24×7 SOC operations. The role collaborates across Microsoft Sentinel, Defender XDR, and managed services, mentoring analysts and improving monitoring capabilities.

You will report to the Security Operations Manager and shape incident response processes, detection coverage, and automation workflows in a hybrid Melbourne

Qualifications

• 5+ years of experience in cyber security or SOC operations.
• Previous experience as a Senior SOC Analyst, L3 Analyst or technical team leader.
• Hands‑on incident response, threat detection and security investigations.
• Experience in a 24×7 SOC or managed detection and response environment.
• Deep knowledge of Microsoft Sentinel, Defender XDR, Entra ID and Azure security.
• Strong KQL skills and experience with SOAR, automation and Logic Apps.
• Familiar with MITRE ATT&CK, NIST IR frameworks, Essential Eight and ISO 27001.
• SC-200 certification is required; SC-100 within three months; CISSP/GIAC/CISM advantageous.

Responsibilities

• Provide hands‑on technical leadership across security operations and incident response activities.
• Lead Level 2 and Level 3 security incident investigations and responses.
• Support 24×7 managed detection and response services.
• Develop and optimise detection capabilities across Microsoft Sentinel and Defender XDR.
• Create and refine KQL queries, detection rules and automated response workflows.
• Leverage SOAR and Azure Logic Apps to improve security operations and incident response processes.
• Mentor SOC analysts and coordinate operational activities.
• Identify opportunities to improve detection coverage and service performance.

Skills

Incident response

Threat detection

Mentoring analysts

Communication

SOC operations

KQL

SOAR

Automation

Tools

Microsoft Sentinel

Defender XDR

Azure Logic Apps

Job description

Sharp & Carter is seeking an experienced Security Operations Lead in Melbourne with hands‑on technical leadership to drive incident response, detection engineering, and 24×7 SOC operations. The role collaborates across Microsoft Sentinel, Defender XDR, and managed services, mentoring analysts and improving monitoring capabilities.

You will report to the Security Operations Manager and shape incident response processes, detection coverage, and automation workflows in a hybrid Melbourne