New The Skills of Tomorrow: how AI-exposed is every skill in 2026? See the data →

From the employer's careers site First seen 25 Oct 2026

Information Security Operations Lead (Sydney, Australia)

Starling Sydney, New South Wales Hybrid senior Full-time

The employer hasn't listed a salary.

Apply on Starling

Description

We are seeking an experienced Information Security Operations Lead to join our growing cyber security function. As a member of the Starling Group's SOC team, you will be working with industry-leading SecOps professionals to protect Starling Group's customers, assets, and systems using the latest technologies.

Responsibilities:

  • Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.
  • Support the development and progression of the Information Security Analyst team from both a technical and professional perspective.
  • Conduct incident triage, response, and investigations based on alerts received from multiple sources.
  • Interpret logs from various sources to identify root cause and determine next steps for containment, eradication, and recovery.
  • Collaborate with other teams to analyze, contain, eradicate, and recover from cyber security incidents.
  • Continuously develop and maintain incident handling, response, and readiness processes.
  • Support the wider SecOps team with detection engineering and threat hunting.
  • Document incidents and investigations, including analysis findings and containment steps.
  • Plan and participate in Tabletop Exercises.
  • Present investigation findings to technical and non-technical audiences.

Requirements:

  • 5+ years of experience in an in-house SOC role and team, including cyber incident response and digital forensics.
  • Experience leading, developing, and motivating a team of subject matter experts and other managers in Information and Cyber Security.
  • Understanding of AWS Security Solutions or other Public Cloud Solutions.
  • Analysis and Incident Response experience with Cloud systems.
  • Experience working with analytics/SIEM platforms.
  • Experience supporting and conducting Incident Response engagements.
  • Experience in endpoint-based investigations and cloud-based investigations.
  • Experience with Incident Command and conducting Tabletop Exercises.
  • Excellent communication skills and ability to communicate technical concepts to non-technical audiences.
  • Demonstrated teamwork and collaboration skills.
  • Time management, problem-solving, and interpersonal skills.
  • Eagerness to learn and apply knowledge to new security challenges.

Benefits:

  • 25 days holiday
  • Birthday on us
  • Option to opt-out of public holidays
  • Option to buy/sell up to 5 days of annual leave a year
  • 16 hours paid volunteering time a year
  • Enhanced Pat & Mat leave
  • Perkbox
  • Length of service increased annual leave

Skills

Required

  • AWS Security Solutions
  • Cloud systems
  • Incident Response
  • Endpoint detection
  • SIEM platforms
  • Threat hunting
  • Tabletop Exercises
  • Communication skills

Nice to have

  • Forensics
  • Programming in Python, Go, or Java
  • Cyber/Information Security related degree or qualification
Apply on Starling