Job Description

SOC Manager (Cyber Security Operations)

MTTD. Know it.
MTTR. Know it.
MTTP. Mean time to prevent.

It isn’t a real metric yet. This team wants to make it one.

A large Australian organisation is looking for a SOC Manager to lead its security operations, and to move the function from detect and respond to predict and respond. A managed provider handles L1 and L2, so your team gets to focus on the escalations that matter and the work that stops incidents happening in the first place.

What you’ll be doing

- Leading a team of three, growing to five as you hire a Senior Detection Engineer and a Senior Incident Responder
- Owning the incident response plan, keeping the team ready, and acting as incident commander when a major incident hits
- Governing the managed security provider closely and holding them to a high standard
- Building threat intelligence from the ground up, operationalising continuous threat exposure management, and bringing threat hunting in-house
- Defining outcome-focused metrics and reporting them to senior leadership
- Optimising the SIEM, SOAR and threat intelligence platforms, and coordinating red teaming and other assessments

What you’ll bring

- 5+ years in cyber security operations,



including time leading a SOC or operations team
- Experience maturing a function and building capability from scratch
- Robust working knowledge of SIEM, SOAR, UBA and CTI platforms, detection engineering and incident response
- Experience managing a managed security provider
- Familiarity with MITRE ATT&CK;, NIST and threat modelling frameworks such as STRIDE and PASTA
- An ownership mindset: you see a problem and bring a solution
- Bonus points for tools like Wiz, CrowdStrike Falcon Identity or AWS GuardDuty, scripting for automation, and certifications such as CISSP, CISM or GIAC

The team

- Flat structure, low egos and a lot of honesty
- People ask for help, share what they know and back each other
- You’ll report to the CISO, who’s openly said the team is smarter than they are
- Real investment in development: a personal plan for every team member, funded training, memberships and conferences

The practical bits

- Permanent, full time
- Hybrid, Sydney (the team is typically in on Tuesdays and Wednesdays)
- $220k to $240k base plus super, plus 10% STI

Ever moved a SOC from reactive to proactive? I’d love to hear how you did it.

📌 SOC Manager (Sydney)
🏢 RONIN Dynamics
📍 Sydney