Senior Cyber Operations & Incident Response Lead

Softtest Pays Pty Ltd; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

The National Disability Insurance Agency (NDIA) is seeking an EL1 Cyber Operations Security Expert in Canberra to lead and perform advanced cyber security tasks under the Director of Cyber Security Operations.

You will specialize in cloud security (Azure/AWS), endpoint and network security, threat intelligence and hunting, DLP, vulnerability management, and incident response, protecting systems and data in pursuit of NDIA's objectives.

Qualifications

• Experience in cyber security operations within a large agency or equivalent environment.
• Ability to lead security incident investigations and forensics with strong documentation.

Responsibilities

• Lead proactive monitoring, investigation, and mitigation of security incidents within security tools (Splunk, Defender 365, Azure Security Center).
• Analyze security event data and identify suspicious/malicious activity across networks and systems.
• Lead incident response activities including investigation, forensics, and chain of custody considerations.
• Respond to events using established SOPs to ensure consistent handling.
• Act as escalation point for complex incidents and SME in cloud security, active defence, and threat mitigation.
• Develop and manage phishing simulations.
• Research new threats and vulnerabilities affecting the Agency's threat landscape.
• Perform log analysis and create visualisation/reporting in Splunk.
• Identify critical data sources for SIEM ingestion and normalisation.
• Collaborate with Security Operations and IT to implement security controls.
• Supervise and mentor junior staff and drive process/tool improvements.
• Produce incident response reports, activity reports, and threat briefs.

Skills

Cloud security

Azure/AWS

Endpoint security

Network security

Threat hunting

Threat intelligence

Data loss prevention

Vulnerability management

Incident response

Security monitoring

SOPs

Tools

Splunk

Azure Security Center

Microsoft Defender 365

Job description

The National Disability Insurance Agency (NDIA) is seeking an EL1 Cyber Operations Security Expert in Canberra to lead and perform advanced cyber security tasks under the Director of Cyber Security Operations.

You will specialize in cloud security (Azure/AWS), endpoint and network security, threat intelligence and hunting, DLP, vulnerability management, and incident response, protecting systems and data in pursuit of NDIA's objectives.