SOC Team Lead: Security Operations & Incident Response

CyberCX, Part of Accenture; Melbourne; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

18 weeks paid parental leave

Flexible work arrangements

Structured career development program

Local and international career机会

Job summary

CyberCX, part of Accenture, is seeking a Team Lead, Security Operations to guide a small team of Security Analysts within our Managed Security Operations Centre in Melbourne. The role blends hands-on security work with people leadership to deliver high-quality incident response and day-to-day operations across multiple customer environments.

The ideal candidate brings senior SOC experience, strong leadership, and the ability to mentor analysts while coordinating delivery, reporting, and customer

Qualifications

• Experience in a Security Operations Centre, Managed Security Service Provider, MDR environment or complex enterprise security operations.
• Proven incident investigations using SIEM, EDR/XDR and other telemetry.
• Ability to interpret security logs and identify suspicious activity.
• Experience with cloud security telemetry (AWS, Azure) and related tools.
• Experience tuning or developing detection logic while reducing false positives.
• Strong incident triage, investigation, containment and escalation skills.
• Mentoring or leading Security Analysts; leadership is advantageous.
• Clear technical guidance while supporting team confidence and decisions.
• Strong communication with technical and non-technical stakeholders.

Responsibilities

• Lead, coach and develop a team of Security Analysts for ongoing career growth.
• Act as escalation point for complex investigations and high-severity incidents.
• Oversee day-to-day delivery of managed security services across customer environments.
• Ensure accurate and timely customer reporting and service delivery.
• Coordinate workload, delegation and quality assurance within the team.
• Manage rostering and participate in on-call rotations.
• Support investigations and containment of security incidents as needed.
• Work with telemetry data to guide investigations and mentor analysts.
• Contribute to development and tuning of detections tailored to customers.
• Assist onboarding of new customers and technologies into the MSSO.
• Build strong relationships with customers and internal teams.

Skills

Security Operations Center

Incident investigation (SIEM/EDR/XDR)

Cloud security telemetry

Detection logic tuning

Incident triage and containment

Mentoring and leadership

Customer and stakeholder communication

On-call / shift management

Tools

AWS CloudTrail

GuardDuty

Azure Entra logs

Job description

CyberCX, part of Accenture, is seeking a Team Lead, Security Operations to guide a small team of Security Analysts within our Managed Security Operations Centre in Melbourne. The role blends hands-on security work with people leadership to deliver high-quality incident response and day-to-day operations across multiple customer environments.

The ideal candidate brings senior SOC experience, strong leadership, and the ability to mentor analysts while coordinating delivery, reporting, and customer