Job Description

SOC Manager (Cyber Security Operations)

MTTD. Know it.
MTTR. Know it.
MTTP. Mean time to prevent.

It isn’t a real metric yet. This team wants to make it one.

A large Australian organisation is looking for a SOC Manager to lead its security operations, and to move the function from detect and respond to predict and respond. A managed provider handles L1 and L2, so your team gets to focus on the escalations that matter and the work that stops incidents happening in the first place.

What you’ll be doing
Leading a team of three, growing to five as you hire a Senior Detection Engineer and a Senior Incident Responder
Owning the incident response plan, keeping the team ready, and acting as incident commander when a major incident hits
Governing the managed security provider closely and holding them to a high standard
Building threat intelligence from the ground up, operationalising continuous threat exposure management, and bringing threat hunting in-house
Defining outcome-focused metrics and reporting them to senior leadership
Optimising the SIEM, SOAR and threat intelligence platforms, and coordinating red teaming and other assessments

What you’ll bring
5+ years in cyber security operations,



including time leading a SOC or operations team
Experience maturing a function and building capability from scratch
Solid working knowledge of SIEM, SOAR, UBA and CTI platforms, detection engineering and incident response
Experience managing a managed security provider
Familiarity with MITRE ATT&CK;, NIST and threat modelling frameworks such as STRIDE and PASTA
An ownership mindset: you see a problem and bring a solution
Bonus points for tools like Wiz, CrowdStrike Falcon Identity or AWS GuardDuty, scripting for automation, and certifications such as CISSP, CISM or GIAC

The team
Flat structure, low egos and a lot of honesty
People ask for help, share what they know and back each other
You’ll report to the CISO, who’s openly said the team is smarter than they are
Real investment in development: a personal plan for every team member, funded training, memberships and conferences

The practical bits
Permanent, full time
Hybrid, Sydney (the team is typically in on Tuesdays and Wednesdays)
$220k to $240k base plus super, plus 10% STI

Ever moved a SOC from reactive to proactive? I’d love to hear how you did it.

📌 Soc Manager Sydney (Australia)
🏢 RONIN Dynamics
📍 Australia