Senior Cyber Operations & Incident Response Expert

WattleCore Technologies Pty Ltd; Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

NDIA is seeking a Cyber Operations Security Expert to lead proactive monitoring, incident response, and cloud security across Azure/AWS environments. The role includes coordinating with the Director of Cyber Security Operations, overseeing forensic activities, and improving security controls for the Agency’s IT platforms.

Ideal candidates will demonstrate experience with SIEM systems (Sentinel, Splunk), security tooling, and threat hunting, with a focus on protecting data and systems in a

Qualifications

• Familiarity with SIEM systems and log analysis.
• Knowledge of the Information Security Manual (ISM) and cyber security concepts.
• Experience implementing Incident Response Frameworks (NIST SP 800-61, MITRE).
• Formal cyber security qualifications or industry certifications (Azure/AWS, Splunk).

Responsibilities

• Lead proactive monitoring, investigation, and mitigation of security incidents using SIEM tools.
• Analyse security events and identify suspicious activity across networks and systems.
• Direct incident response including initial and detailed investigations and forensics.
• Escalate incidents as needed and apply SOPs for incident handling.
• Be the SME for cloud security, active defence, and threat mitigation.
• Develop phishing simulations and threat intelligence reports.
• Collaborate with Security Operations and IT teams to implement controls.
• Mentor junior staff and contribute to process improvements.

Skills

SIEM

Cloud security

Threat hunting

Incident response

Endpoint security

Network security

Monitoring

Forensics

Education

Cyber security degree

Tools

Sentinel

Microsoft Defender 365

Azure Security Centre

Splunk

Job description

NDIA is seeking a Cyber Operations Security Expert to lead proactive monitoring, incident response, and cloud security across Azure/AWS environments. The role includes coordinating with the Director of Cyber Security Operations, overseeing forensic activities, and improving security controls for the Agency’s IT platforms.

Ideal candidates will demonstrate experience with SIEM systems (Sentinel, Splunk), security tooling, and threat hunting, with a focus on protecting data and systems in a