# Information Security Operations Lead (Sydney, Australia)

**Company**: Starling
**Location**: Sydney, New South Wales
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: Full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://jobs.workable.com/view/e7R2HZdhpo68y9cdQPCnqw/hybrid-information-security-operations-lead-(sydney%2C-australia)-in-sydney-at-starling?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_1283fafe-911

## Description

We are seeking an experienced Information Security Operations Lead to join our growing cyber security function. As a member of the Starling Group's SOC team, you will be working with industry-leading SecOps professionals to protect Starling Group's customers, assets, and systems using the latest technologies.

Responsibilities:

- Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.

- Support the development and progression of the Information Security Analyst team from both a technical and professional perspective.

- Conduct incident triage, response, and investigations based on alerts received from multiple sources.

- Interpret logs from various sources to identify root cause and determine next steps for containment, eradication, and recovery.

- Collaborate with other teams to analyze, contain, eradicate, and recover from cyber security incidents.

- Continuously develop and maintain incident handling, response, and readiness processes.

- Support the wider SecOps team with detection engineering and threat hunting.

- Document incidents and investigations, including analysis findings and containment steps.

- Plan and participate in Tabletop Exercises.

- Present investigation findings to technical and non-technical audiences.

Requirements:

- 5+ years of experience in an in-house SOC role and team, including cyber incident response and digital forensics.

- Experience leading, developing, and motivating a team of subject matter experts and other managers in Information and Cyber Security.

- Understanding of AWS Security Solutions or other Public Cloud Solutions.

- Analysis and Incident Response experience with Cloud systems.

- Experience working with analytics/SIEM platforms.

- Experience supporting and conducting Incident Response engagements.

- Experience in endpoint-based investigations and cloud-based investigations.

- Experience with Incident Command and conducting Tabletop Exercises.

- Excellent communication skills and ability to communicate technical concepts to non-technical audiences.

- Demonstrated teamwork and collaboration skills.

- Time management, problem-solving, and interpersonal skills.

- Eagerness to learn and apply knowledge to new security challenges.

Benefits:

- 25 days holiday

- Birthday on us

- Option to opt-out of public holidays

- Option to buy/sell up to 5 days of annual leave a year

- 16 hours paid volunteering time a year

- Enhanced Pat & Mat leave

- Perkbox

- Length of service increased annual leave

## Skills

### Required
- AWS Security Solutions
- Cloud systems
- Incident Response
- Endpoint detection
- SIEM platforms
- Threat hunting
- Tabletop Exercises
- Communication skills

### Nice to have
- Forensics
- Programming in Python, Go, or Java
- Cyber/Information Security related degree or qualification

---

Source: [Apply at jobs.workable.com](https://jobs.workable.com/view/e7R2HZdhpo68y9cdQPCnqw/hybrid-information-security-operations-lead-(sydney%2C-australia)-in-sydney-at-starling?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)