Job Description

Your opportunity

n

The Senior Incident Response Specialist role is to take ownership of complex, high-severity security incidents from detection through recovery. You'll lead investigations into advanced threats, sharpen our detection capabilities, and act as the technical escalation point for the team. Beyond hands-on response, you'll mentor specialists, level up our offshore CSOC's L3/L4 capability, and work closely with the Incident Manager, NOC, vendors, and stakeholders to keep incidents moving and everyone informed.

n

Responsibilities

n

n
- Lead end-to-end response to high-severity incidents - APT activity, nation-state actors, cybercriminal intrusions - owning containment, eradication, and recovery with minimal business impact.
n
- Serve as senior SME and escalation point for complex or high-priority cases.
n
- Investigate complex threats across endpoint, network, cloud, and identity domains using EDR, NDR, and SIEM tools.
n
- Apply static and dynamic malware analysis to understand attacker tooling and intent.
n
- Build, maintain, and continuously refine playbooks, runbooks, and escalation procedures through regular tabletop exercises.
n
- Partner with threat intel, SOC, and IT/network teams to identify and mitigate emerging threats.
n
- Drive root cause analysis and post-incident reviews, maintaining thorough documentation throughout.
n
- Apply MITRE ATT&CK; and adversary profiling to turn investigation findings into actionable threat intelligence.
n
- Provide expert guidance during live incidents and crisis situations.
n
- Track emerging threats, vulnerabilities, and TTPs to keep defenses current.
n
- Mentor and upskill CSOC analysts, contributing to the ongoing maturity of the IR program.
n
- Leverage AI/ML-driven security tools (e.g., AI-enabled EDR/XDR, UEBA) to enhance threat detection and triage.
n
- Analyse anomalies and patterns identified through machine learning models to identify advanced threats.
n




- Utilise AI-assisted threat hunting and automation to improve detection speed and reduce false positives.
n
- Participate in an on-call rotation for major incidents.
n

n

What you'll bring

n

n
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
n
- 5+ years of hands-on incident response and forensics experience, with proven Tier 3-level investigation and threat hunting expertise.
n
- Strong grounding in threat hunting, malware analysis, adversary tactics (MITRE ATT&CK;), NIST, and other security frameworks.
n
- Practical experience with SIEMs (e.g. Splunk), EDR (e.g. SentinelOne, Defender, Trend Micro), NDR (e.g. Darktrace, Vectra AI), threat intel platforms (e.g. MISP, SOCRadar), and forensic toolsets.
n
- Familiarity with cloud security across AWS, Azure, GCP, and hybrid environments.
n
- Solid analytical, communication, and documentation skills.
n

n

What's in it for you?

n

n
- Flexible hybrid way of working (from home and office)
n
- 'Stay Connected Mobile' - Access to a free mobile plan
n
- 'Stay Connected NBN' - Access to a free, high-speed NBN plan (up to 500 Mbps)
n
- 'Your Leave' - an additional 4 days of leave to be used whenever you like - every year
n
- Access to TPG Learning Hub platform and internal development opportunities
n
- Access to Corporate Partner Discounts
n

n

Come join us and build a better future.

n

Don't meet every single requirement? That's OK! At TPG Telecom, we're all about creating an accessible workplace where everybody feels safe to bring their authentic self to work - regardless of background. If you think this role is a great fit for you but some of the qualifications don't align with your experience, we still encourage you to apply - you might just be the perfect candidate for a similar role with us!

n

TPG Telecom also acknowledges the Gadigal People of the Eora Nation as the Traditional Custodians of lands and waterways where this office can be found in Barangaroo.

#J-18808-Ljbffr

📌 Senior Incident Response Specialist (New South Wales)
🏢 Tpg Telecom
📍 New South Wales