Senior Manager, Cyber Threat Detection & Response

Teneo; Melbourne; Hybrid; AUD 180,000 - 260,000; Full time

Job summary

Teneo is seeking a senior Cybersecurity Engineer in Melbourne to join our security team. The role focuses on detection engineering, SIEM/XDR rule design, and blue-team operations to strengthen our defences across cloud, network and endpoints.

You will automate security processes, respond to alerts, and collaborate with IT and business units to embed security into architectures and deployments. Hybrid work requires three days in the office each week.

Qualifications

• 5–7+ years in cybersecurity engineering/operations.
• Hands-on experience in detection, SIEM/XDR, log management and incident response.
• Scripting for automation (Python, PowerShell, Bash).
• Strong knowledge of network and cloud security, IAM and firewall/IDS/IPS.

Responsibilities

• Design, tune and operate detection rules for SIEM/XDR.
• Triage alerts and investigate security incidents with cross-functional teams.
• Deploy and manage security tooling across cloud, network and endpoints.
• Perform vulnerability assessments and threat hunting; tune detection logic.
• Automate security operations with scripts or SOAR workflows.
• Collaborate with IT/DevOps to embed security into architectures and deployments.
• Produce run-books and dashboards for security operations.

Skills

Detection engineering

SIEM/XDR

Log management

Incident response

Automation scripting

Cloud security

Tools

SIEM platforms

IDS/IPS/NDR

Firewalls

Endpoint protection

Cloud security tools

SOAR platforms

Job description

The Role

Teneo seeks a skilled and self-sufficient Cybersecurity Engineer (Senior Manager) to join our security team in Melbourne. In this role you will focus primarily on detection engineering and blue-team operations: designing, writing and tuning detection / SIEM / XDR rules, responding to security alerts and incidents, and maintaining our security posture across cloud, network and endpoint environments. You will play a critical role in strengthening our defences, automating security processes, and enabling IT and business teams to operate securely.

The position follows a hybrid working model, with three days per week in the office.

Responsibilities

• 7+ years of professional experience in cybersecurity engineering / operations, with hands-on experience in detection, SIEM/XDR, log management, incident response, and security tool administration.
• Configure, deploy, and manage security tooling: SIEM / XDR platforms, log management, IDS/IPS/NDR, firewalls, endpoint protection, cloud-security tools, and other security infrastructure.
• Triage and investigate alerts: perform log analysis, correlate events, determine real threats, escalte or respond as needed.
• Perform vulnerability assessments, threat hunting, risk-based tuning of detection rules, and threat modelling for identified CVEs / weaknesses.
• Participate in incident response: containment, mitigation, root-cause analysis, remediation, documentation, lessons-learned, and improvement of detection strategies.
• Automate security operations where possible: develop scripts or workflows (e.g., via Python, PowerShell, Bash, SOAR integrations) to streamline monitoring, alerting, incident handling, and reporting.
• Collaborate with IT, DevOps, and business stakeholders to embed security best practices into system and network architecture, cloud infrastructure, and software deployments.
• Maintain and enforce security policies, standards, access controls, and compliance frameworks (e.g., relevant regulatory or industry standards).
• Produce clear documentation, dashboards, reports, and run-books for detection logic, incidents, and ongoing security operations.

Requirements

Must-have

• Several years (e.g., 5–7+) of professional experience in cybersecurity engineering / operations, with hands-on experience in detection, SIEM/XDR, log management, incident response, and security tool administration.
• Strong technical knowledge in network security, cloud security (e.g., AWS, Azure, or similar), endpoint security, identity and access management (IAM), firewall/IDS/IPS, and intrusion detection/prevention.
• Proven ability to author, tune and review detection rules / alerts / log-parsing logic, and to perform advanced log analysis and event correlation.
• Familiarity with scripting or automation (e.g., Python, PowerShell, Bash), for building detection logic, automating response, or managing security tool configurations.
• Solid understanding of security frameworks, best practices, and threat-detection methodologies.
• Strong analytical, problem-solving, communication, and collaboration skills — able to work independently but also engage with IT/security stakeholders.

Desirable

• Experience with cloud-native security environments and multi-cloud deployments.
• Familiarity with SOAR or security automation/orchestration platforms.
• Certifications such as CISSP, CISM, CEH, or other relevant credentials.
• Prior experience in a blue team / SOC / detection engineering / incident response role.
• Understanding of compliance, regulatory standards, and risk management best practices.

Why Join Teneo’s Security Team

At Teneo, you’ll be part of a committed security team helping protect a dynamic, global consulting company. This role offers the opportunity to influence and shape our security posture, contribute to designing and building detection capabilities from the ground up, and work autonomously with support from experienced leadership.

About Teneo

Teneo is the global CEO advisory firm. We partner with our clients globally to do great things for a better future.

Drawing upon our global team and expansive network of senior advisors, we provide advisory services across our five business segments on a stand-alone or fully integrated basis to help our clients solve complex business challenges. Our clients include a significant number of the Fortune 100 and FTSE 100, as well as other corporations, financial institutions, and organizations.

Our full range of advisory services includes strategic communications, investor relations, financial transactions and restructuring, management consulting, physical and cyber risk, organizational design, board and executive search, geopolitics and government affairs, corporate governance, ESG and DE&I.

The firm has more than 1,800 employees located in 45+ offices around the world.