Senior SOC Lead: Incident Response & Detection (Hybrid)

The Lottery Corporation; Brisbane; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Generous leave options

Learning & development platform

Career growth opportunities

Inclusion & Diversity programs

Volunteer matching donations

Job summary

The Lottery Corporation is seeking a hands-on Security Operations professional to lead complex, high-severity incidents and improve detection content. You’ll mentor analysts, lift investigation capability, and work with our MDR partners to strengthen our security posture.

Your work will span SIEM, SOAR, and AI-driven automation, with hands-on scripting and threat intelligence to enhance incident response across our Brisbane-based security operations team.

Qualifications

• 5+ years’ experience in Security Operations or a SOC environment.
• Strong incident response and detection engineering capability.
• Experience leading complex or high-severity investigations.
• Hands-on experience across SIEM, endpoint and network monitoring.

Responsibilities

• Lead complex and high-severity incident response.
• Build and tune detection content across our environment.
• Investigate threats through log analysis and evidence correlation.
• Improve alert quality and detection coverage.
• Develop automation to improve security operations.
• Apply AI to triage, investigation and response workflows.
• Manage day-to-day engagement with MDR partners.
• Lead post-incident reviews and drive improvements.
• Mentor analysts and uplift investigation capability.
• Participate in the Security Operations on-call rotation.

Skills

Incident response

Detection engineering

MDR coordination

SIEM

SOAR

PowerShell/Linux scripting

AI in SecOps

Threat intel

Mentoring others

Education

Bachelor’s degree in a relevant field

Tools

SIEM

Endpoint monitoring

Network monitoring

Log onboarding

Job description

The Lottery Corporation is seeking a hands-on Security Operations professional to lead complex, high-severity incidents and improve detection content. You’ll mentor analysts, lift investigation capability, and work with our MDR partners to strengthen our security posture.

Your work will span SIEM, SOAR, and AI-driven automation, with hands-on scripting and threat intelligence to enhance incident response across our Brisbane-based security operations team.