Security Operations Lead: Hands-on Incident Response

Sharp and Carter; Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Sharp and Carter in Melbourne is seeking a Security Operations Lead to provide hands-on technical leadership across incident response, detection engineering and 24x7 operations. You will lead Level 2/3 investigations, build advanced detection with Microsoft Sentinel and Defender XDR, and mentor SOC analysts to improve monitoring and response.

Reporting to the Security Operations Manager, you will coordinate across Azure security tools and SOAR workflows to sustain effective MDR services in a

Qualifications

• Five+ years in cyber security or SOC operations.
• Experience as Senior SOC Analyst, L3 Analyst or technical team lead.
• Strong hands-on incident response, threat detection and security investigations.

Responsibilities

• Provide hands-on technical leadership across security operations and incident response activities.
• Lead complex Level 2 and Level 3 security incident investigations, escalations and response activities.
• Support the delivery and continuous improvement of 24×7 managed detection and response services.
• Develop, maintain and optimise security detection capabilities across Microsoft Sentinel and Defender XDR.
• Create and refine KQL queries, detection rules and automated response workflows.
• Leverage SOAR and Azure Logic Apps to improve security operations and incident response processes.
• Mentor SOC analysts, provide technical guidance and support operational coordination.
• Identify opportunities to improve detection coverage, incident response processes and service performance.

Skills

SOC operations

Incident response

Threat detection

MITRE ATT&CK

KQL

SOAR & Automation

Azure security

Tools

Microsoft Sentinel

Defender XDR

Azure Logic Apps

SOAR

Entra ID

Job description

Sharp and Carter in Melbourne is seeking a Security Operations Lead to provide hands-on technical leadership across incident response, detection engineering and 24x7 operations. You will lead Level 2/3 investigations, build advanced detection with Microsoft Sentinel and Defender XDR, and mentor SOC analysts to improve monitoring and response.

Reporting to the Security Operations Manager, you will coordinate across Azure security tools and SOAR workflows to sustain effective MDR services in a