Information Security Operations Lead (SOC Team Lead)

About the role

Starling is looking for an experienced SOC Team Lead with incident response experience to join its growing cyber security function. The role supports 24/7 operational capabilities by providing coverage during working hours from Sydney and Toronto alongside UK colleagues. It works with SecOps professionals to protect customers, assets and systems, and is based in Sydney with a hybrid approach, preferring candidates within commuting distance.

Key responsibilities

• Lead a team of subject matter experts and analysts, developing them technically and professionally
• Handle incident triage, response and investigations from alerts covering cloud infrastructure, endpoint detection and response and perimeter tools
• Run quality assurance on triage cases, mitigation actions and shift handover, and implement improvements
• Analyse logs from cloud, endpoint and network sources to find root cause and plan containment, eradication and recovery
• Work with other teams to analyse, contain, eradicate and recover from cyber incidents
• Maintain incident handling, response and readiness processes
• Support detection engineering and threat hunting, and document incidents and investigations
• Plan and take part in tabletop exercises, and present findings to technical and non-technical audiences

Required profile

• 5+ years in an in-house SOC role, including cyber incident response and digital forensics
• Experience leading, developing and motivating a team of subject matter experts in information and cyber security
• Self-starter who leads, inspires and drives change, with excellent verbal and written communication
• Teamwork, time management, problem-solving and willingness to mentor colleagues

Required skills

• AWS security solutions or other public cloud solutions
• Incident response with cloud systems (GCP, AWS) and SIEM/analytics platforms
• Endpoint and cloud-based investigations, incident command and tabletop exercises
• Preferred: forensics (cloud, endpoint/server Windows/MacOS/Linux, network), Python/Go/Java, malware analysis

What we offer

• 25 days holiday, birthday off, and the option to buy or sell up to 5 days of annual leave
• 16 hours of paid volunteering time per year and enhanced parental and maternity leave
• Perkbox and length-of-service increased annual leave