Cyber Incident Response Lead
Core
Lead end-to-end detection, triage, containment, and recovery of cyber incidents while conducting threat hunting and building detection engineering for a Victorian State Government agency.
Role type
Senior Cyber Incident Response Lead (SOC)
Builds
SOC processes, detection rules, playbooks, automation, and executive security metrics
Domain
Government / Cyber Security
Required skills
Cyber incident response leadership, threat hunting, SIEM/EDR operations, detection engineering, KQL, NIST CSF, MITRE ATT&CK, vulnerability management, executive reporting
Preferred skills
CSIRT experience, crisis management, stakeholder advisory
Technologies
Microsoft Sentinel, Microsoft Defender, Splunk, Google Security, Tenable, ServiceNow
Responsibilities
Lead incident response (detection, triage, containment, recovery), conduct Level 2/3 investigations, perform daily SOC monitoring and alert escalation, build and enhance Sentinel detection engineering, deliver situation reports and RCA reports, provide expert security advice, partner with ICT teams and government agencies
Seniority
Senior, hands-on IC
