Senior AI-Driven SOC Lead — Incident Response (Hybrid)

K1 Industries; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Hybrid work model

Job summary

Xero in Australia is seeking a Senior Security Operations Analyst to lead incident response and shape an AI-assisted SOC. You will manage complex investigations, act as Incident Commander for high-impact events, and drive improvements to detections, runbooks, and training.

Based in New South Wales with a hybrid work model, you’ll build automations and AI workflows to reduce repetitive work while remaining hands-on during critical incidents.

Qualifications

• Strong experience in security operations and incident response.
• Proven track record leading complex investigations.
• Solid knowledge of cloud and SaaS security.
• Ability to write queries in SIEMs and log platforms.

Responsibilities

• Lead complex investigations and Incident Commander for medium and high impact incidents.
• Coach junior analysts and escalation points, guiding through tricky scenarios.
• Run post-incident reviews that drive changes in detections and training.
• Lead initiatives with Product Manager and SOC Managers to deliver outcomes.
• Build automations and AI-assisted workflows with guardrails and approvals.
• Collaborate with Defence engineers on detection and response logic.
• Translate threat intelligence into practical actions for Xero.
• Provide clear, timely security answers to customers and internal teams.

Skills

Security operations

Incident response

Investigation leadership

SIEM queries

Cloud/SaaS security

Clear communication

AI automation

Tools

SIEM platforms

SOAR (Tines)

AI tools in security

Job description

Xero in Australia is seeking a Senior Security Operations Analyst to lead incident response and shape an AI-assisted SOC. You will manage complex investigations, act as Incident Commander for high-impact events, and drive improvements to detections, runbooks, and training.

Based in New South Wales with a hybrid work model, you’ll build automations and AI workflows to reduce repetitive work while remaining hands-on during critical incidents.