Lead Security Analyst

Kinetic IT; Southwestern Ontario; On-site; CAD 100,000 - 135,000; Full time

Job summary

A leading IT services provider is seeking a Lead Security Analyst to join their team in Canada, Ontario. This position involves working closely with clients to enhance cyber defense capabilities, providing technical leadership, and mentoring junior analysts. The ideal candidate should have deep expertise in Microsoft Sentinel, strong incident response skills, and the ability to guide teams in threat detection and response. This is a full-time role offering opportunities for professional growth and development.

Benefits

Formal training and mentoring

Flexible working hours

Health and wellness resources

Qualifications

• Experience leading SOC operations and guiding teams through escalations.
• Expertise in Microsoft Sentinel, including analytics and automation.
• Proven ability in high-severity incident response.

Responsibilities

• Lead day-to-day technical operations of the SOC.
• Act as a Sentinel subject-matter expert for various operations.
• Own threat-hunting operations using various tools.

Skills

Microsoft Sentinel expertise

Threat hunting

Incident response

KQL proficiency

Coaching and mentorship

Communication skills

Tools

Sentinel

Defender

Tenable

ServiceNow

Logic Apps

Job description

Lead Security Analyst

Apply now Job no: WWREQ0032310

Employment type: Full Time

Location: Perth

Categories: Cyber Security

Join Kinetic IT as a Lead Security Analyst, working on site with one of our largest Perth-based clients.

In this role, you’ll play a key part in shaping the maturity of our cyber defence capability, partnering closely with the Security Operations Manager to uplift detection, response, and threat intelligence functions. You’ll provide hands‑on technical leadership to the L1 and L2 analysts, guide complex investigations, and lead improvements across the SOC’s processes, tools, and overall security posture.

This is an opportunity to influence direction, drive capability uplift, and help safeguard a high‑profile environment through proactive threat hunting and coordinated incident response.

Responsibilities will include:

• Leading day-to-day technical operations of the SOC, guiding L1 / L2 analysts and owning escalation paths.
• Acting as the Sentinel subject‑matter expert: rule tuning, analytic creation, workbook / dashboards, data connector configuration, and automation via Logic Apps.
• Owning threat‑hunting operations using KQL, intelligence feeds, and Sentinel's hunting tools to identify unknown or emerging threats.
• Ensuring incident documentation, evidence handling, and reporting to meet governance, privacy, and audit expectations.
• Providing technical mentorship, upskilling, and coaching to the analyst team, ensuring consistent analytical quality.
• Managing integrations between Sentinel and Tenable, Defender stack, and SNOW, validating data flows and resolving ingestion issues.
• Driving continuous improvement of playbooks, response procedures, and SOC workflows aligned to ISM, Essential 8, and DOE requirements.
• Serving as the technical liaison with DOE stakeholders, providing clear briefings, incident summaries, and recommendations for security uplift.

What you’ll bring to the table:

• Prior experience leading SOC operations and guiding L1 / L2 analysts through escalations and complex investigations.
• Deep expertise with Microsoft Sentinel, including rule tuning, analytics, hunting, dashboards, data connectors, and Logic Apps automation.
• Proven capability in high‑severity incident response, including triage, investigation, containment, and clear documentation.
• Advanced detection engineering and threat‑hunting skills using KQL, intelligence feeds, and behavioural analytics.
• Experience managing integrations across Sentinel, Defender, Tenable, and ServiceNow.
• Ability to uplift team capability through mentorship, coaching, and consistent analytical standards.
• Strong communication skills with the confidence to brief stakeholders and provide security uplift recommendations.

About Kinetic IT

Kinetic IT is a leading Australian IT services provider specialising in Intelligent Workplace, Cloud, Cyber Security, Digital Infrastructure and IT Service Management. We are unlocking the potential of technology to enrich lives of Australian communities.

For more than 25 years, we’ve partnered with some of Australia’s most important organisations, helping them deliver essential services relied upon by our communities including government, critical infrastructure, education, law enforcement, defence, emergency services, utilities, and transport.

Be You, Create the Future

At Kinetic IT, we’re driven by a shared passion for technology, customer success, and community impact.

With over 1,500 talented people working across Australia, we deliver world‑class capabilities with a local touch – helping shape the future of tech, here and beyond.

We value individuality and foster an inclusive culture where you’re safe to be your best, real self. We tackle challenges together, celebrate success together, and make sure everyone feels valued, supported, and proud of the work they do.

As an equal opportunity employer, we welcome people of all abilities, backgrounds, cultures, and genders. We’re proud to be an Indigenous and Veteran‑friendly employer.

The Kinetic IT Difference

• Growth‑focused culture – Formal training, mentoring, vendor exam support, communities of practice, and regular development reviews.
• Advance your career – Access new roles via our internal ‘Opportunity Marketplace’ careers hub.
• Flex your work – Hybrid options, flexible hours, mobility and part‑time roles (customer needs permitting) and a variety of leave options (including paid parental leave and purchased leave) to suit your needs.
• Celebrate together – Social events, cultural celebrations, end‑of‑year functions, DEI belonging events and more.
• Wellbeing matters – Health and wellness resources and events, free skin and health checks, free flu shots, tailored leave and support options, free and confidential EAP and access to Fitness Passport.

How To Apply

Work with us as we bring technology to life. Apply today or send your CV direct to [e-mail].

You can learn more about our culture and crew online at kineticit.com.au.

Advertised: 09 Dec 2025 W. Australia Standard Time

Applications close: 02 Jan 2026 W. Australia Standard Time