New Job Opening: SOC Manager in St Leonards, NSW

Job Description

SOC Manager (Cyber Security Operations)

MTTD. Know it.
MTTR. Know it.
MTTP. Mean time to prevent.

It isn’t a real metric yet. This team wants to make it one.

A large Australian organisation is looking for a SOC Manager to lead its security operations, and to move the function from detect and respond to predict and respond. A managed provider handles L1 and L2, so your team gets to focus on the escalations that matter and the work that stops incidents happening in the first place.

What you’ll be doing

• Leading the SOC team across monitoring, detection, incident response, threat intelligence and exposure management


• Owning the relationship with the managed security provider, and holding them to a high standard on quality and alignment


• Building out threat modelling (STRIDE, PASTA) and continuous threat exposure management, so priorities are driven by attack paths and business impact rather than scan reports


• Optimising the SIEM, SOAR and threat intelligence platforms, and driving automation wherever it saves the team time


• Running playbooks, escalation procedures and incident response plans, and coordinating stakeholders when a major incident hits


• Coordinating enterprise-wide security assessments, including red teaming


• Reporting on operations metrics and threat trends to senior leadership

What you’ll bring

• 5+ years in cyber security operations, including time leading a SOC or operations team


• Strong working knowledge of SIEM, SOAR, UBA and CTI platforms, detection engineering and incident response


• Familiarity with MITRE ATT&CK, NIST and threat modelling frameworks, plus risk-based prioritisation and attack path analysis


• Excellent stakeholder skills, from engineers and resolver groups through to legal, HR, cyber insurance and executives


• A calm head and good judgement under pressure


• Bonus points for experience with tools like Wiz, CrowdStrike Falcon Identity or AWS GuardDuty, scripting for automation, and certifications such as CISSP, CISM or GIAC

The team

• Flat structure, low egos and a lot of honesty


• People ask for help, share what they know and back each other


• You’ll report to the CISO who’s openly said the team is smarter than they are

The practical bits

• Permanent, full time


• Fully remote within Australia


• $220k to $240k base plus super, plus a 10% bonus

Ever moved a SOC from reactive to proactive? I’d love to hear how you did it.