Job Description

You’ve led incident response, helped good analysts get better, and stayed technical enough to jump in when an investigation gets difficult.

I’m recruiting someone to lead a small team of experienced responders. You’ll help them develop their skills, guide investigations and take the lead when incidents need your involvement.

Cloud incident response experience is particularly important. You’ll need the depth to challenge an approach, support your analysts and explain what’s happening to people outside security.

You’ll work closely with security engineering and an external security provider, making sure investigations, escalations and response actions run smoothly. You’ll also improve playbooks and reporting, and help the team get more from its security tools.

A big part of the role is working out how AI and automation can improve the SOC, then putting those ideas into practice.

The hiring manager wants to hear your view. What would you change? Where would you start? Which decisions would you keep in human hands?

This could suit an established manager who enjoys staying close to the technical work, or a technical team leader with experience managing and developing incident responders.

Message or call me if you’d like to talk it through.

russell@theonset.com.au / 0438984265