Security Operations and Engineering Lead

About this role

Harrington Starr are seeking a hands-on Security Operations and Engineering Lead for a global trading organization based in Sydney. This is a new role been created through expansion and offers an exciting blend of technical and strategic challenges.

On a day to day basis the key accountabilities will include

• Lead and develop a high-performing team of security engineers and analysts
• Oversee daily security operations, including triage, investigation, and incident resolution
• Improve processes and align with global standards, tooling, and practices
• Manage high-severity incidents, coordinating across technical and business teams
• Drive automation to reduce manual effort and enhance detection and response
• Act as the APAC point of contact for operational security and build strong stakeholder relationships
• Contribute to the global security operations strategy and roadmap

We are looking to speak to candidates who have the following experience:

• Extensive experience across EDR, SIEM, vulnerability management, identity security, and cloud security tools.
• Proven ability to establish and enhance operational processes, including alerting, triage, incident response, playbooks, tooling, and escalation workflows.
• Strong understanding of SOC operations, including detection tuning/engineering, playbook creation, and maintaining operational runbooks.
• Experience leading or coordinating incident response activities across cross-functional teams.
• Track record of building and developing high-performing, collaborative teams in fast-paced environments.
• Promotes a culture focused on continuous improvement and operational excellence.
• Knowledge of cloud security (AWS and M365), identity management (Entra ID, SSO, conditional access), and data protection is desirable.
• Familiarity with automation using Python or PowerShell

Please send your resume for immediate review

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.