SOC & Incident Response Manager

The Onset Group; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

The Onset Group in Australia is seeking a senior security professional to lead a small team of experienced incident responders. You will guide investigations, mentor analysts and take the lead on complex incidents, especially in cloud environments.

You’ll collaborate with security engineering and external providers, sharpen playbooks, improve reporting, and explore how AI and automation can strengthen the SOC while ensuring clear communication to non-technical stakeholders.

Qualifications

• Experience leading incident response teams.
• Cloud incident response experience is essential.
• Ability to explain technical issues to non-technical stakeholders.

Responsibilities

• Lead a small team of incident responders and guide investigations.
• Mentor analysts and develop their skills.
• Take the lead on complex incidents, especially in cloud environments.
• Collaborate with security engineering and external providers to ensure smooth investigations and escalations.
• Improve playbooks and reporting, and drive the SOC with automation and AI initiatives.

Skills

Incident leadership

Cloud security

Team leadership

Stakeholder comms

Job description

You’ve led incident response, helped good analysts get better, and stayed technical enough to jump in when an investigation gets difficult.

I’m recruiting someone to lead a small team of experienced responders. You’ll help them develop their skills, guide investigations and take the lead when incidents need your involvement.

Cloud incident response experience is particularly important. You’ll need the depth to challenge an approach, support your analysts and explain what’s happening to people outside security.

You’ll work closely with security engineering and an external security provider, making sure investigations, escalations and response actions run smoothly. You’ll also improve playbooks and reporting, and help the team get more from its security tools.

A big part of the role is working out how AI and automation can improve the SOC, then putting those ideas into practice.

The hiring manager wants to hear your view.What would you change? Where would you start? Which decisions would you keep in human hands?

This could suit an established manager who enjoys staying close to the technical work, or a technical team leader with experience managing and developing incident responders.