Senior Incident Responder (Cyber Security)

About the role

A large Australian organisation is expanding its security operations team and needs a senior professional who has managed live P1 incidents from detection to stand‑down.

Key responsibilities

• Lead technical response to cyber incidents, handling triage, containment, recovery and post‑incident review.
• Act as lead investigator across endpoint, network, identity and cloud environments.
• Manage third‑party security service provider performance, escalations and monthly reporting.
• Write and run playbooks and tabletop exercises to improve incident handling.
• Conduct threat hunting during quieter periods.

Required profile

• Senior, hands‑on incident response experience, including live P1s such as ransomware or BEC.
• Strong forensic and investigation skills across endpoints, memory and logs.
• Experience managing a third‑party security provider and defining reporting standards.
• Ability to stay calm at 3 am and communicate technical details to senior non‑technical leaders.

Required skills

• SIEM platforms (e.g., Microsoft Sentinel, Splunk).
• EDR tools (e.g., Microsoft Defender, CrowdStrike).
• Forensic analysis of endpoints, memory and log data.
• Threat hunting techniques.

What we offer

• Permanent full‑time position.
• Hybrid work model in Sydney.
• Salary $160k‑$180k base plus super.