Security Operations Incident Response - Manager

Company Description

One purpose, one practice

We are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

Our purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices:

• Transformation
• Risk, Programs and Cyber
• Commercial, Financial and Infrastructure

The Team

Our Cyber capability is a leader in trust-based services to the public and for-purpose sector, we are here to support clients whenever a concern or big decision arises. We support clients to achieve outcomes for communities that are increasingly seeking trusted sources of information around issues like organisational integrity, cyber risk, integrity of data, commitment to sustainability and climate change, as well as the efficiency and effectiveness of transformation programs.

Our Security Operations team are experts in defending organisations from live cyber-attacks. We provide full-service Incident Response, Digital Forensics, and Security Operations support to our clients, helping them prepare for, detect, and respond to all types of cyber incidents. We use Cyber Threat Intelligence (CTI) to help our clients protect themselves from emerging cyber threats, vulnerabilities, and exploits. We work with our clients to hunt for threats in their environments, using our expertise and experience to identify potential weaknesses or issues. 

Job Description

Behavioural requirements for all candidates 

• Exemplary Communication Skills (both written and verbal): Your excellent communication abilities build relationships quickly within teams and with clients, fostering an environment of transparency and mutual understanding. 

• Innovative Problem-Solving: You possess a natural inclination for problem-solving, coupled with a passion for working on the challenges that affect all Australians. 

• Continuous Learning: You stay abreast of emerging trends and advancements in technology, security, and geopolitics, enriching your expertise and driving continuous improvement initiatives. 

• Collaborative Nature: Thriving in collaborative environments, you enjoy working alongside like-minded individuals who want to make a difference.  

• Integrity, Care, and Confidentiality: Acting with integrity and demonstrating genuine care for your colleagues and clients are paramount to your work ethic. You maintain confidentiality and handle sensitive information responsibly, fostering trust and respect in all your interactions. 

• Adaptability: You are comfortable in a range of situations and roles, from delivering high quality work on a client project through to coaching peers and junior staff on improving their own skills.  

As a Manager in our Security Operations team, you will create value by:

• Leveraging your technical consulting skills set to deliver high quality outcomes to our clients through a combination of hands-on delivery, and regular technical leadership and coaching to more junior members of the team. 
• Leading small client engagements or low-complexity incident response situations, providing expertise to a team of specialists to deliver innovative and high-quality services in the areas of Threat Intelligence, Security Monitoring, and Digital Forensics & Incident Response. 
• Supporting business development activities including proposal development, competitive RFT/RFP responses, cost modelling, and supporting client presentations / demonstrations. 

• Managing the budget of small client engagements to ensure they are delivered on time and on budget. 

• Managing a small team of consultants and providing guidance and mentoring to ensure their professional growth. 

• Supporting the development of new capabilities, products and services based on market demand.  

Qualifications

About you

Aligned to our values, you're collaborative in nature and love working in and celebrating as a team. You respect and care for your colleagues and are curious about others’ views and reflect on the impact we have on others.

You have a growth mindset. You're interested in asking questions to challenge our thinking and love new ideas and trying new things. You're curious about and able to put yourself in the clients’ shoes; you earn and value the trust placed in us.

You're someone who does what you say you'll do, and you do the right thing when no-one is looking, and you call it when you feel something isn’t quite right.

Technically, you will bring to the position: 

• 5+ years of proven industry experience working in incident response, digital forensics or security operations. 
• A ‘hands-on’ set of technical skills in contemporary technologies including networks, hyperscale clouds (Azure, AWS, GCP), common SaaS applications, end user compute, and data management tools. 
• A sound base of knowledge on digital forensics and data analysis practices, as well as hands-on experience and capability with the tooling used to support these activities. 
• A sound foundation in relevant industry frameworks such as MITRE ATT&CK and NIST SP 800-61. 
• Basic project management skills and the proven ability to lead a team of people in the delivery of a small project. 
• Qualifications and certifications in recognised and relevant industry accreditations such as GCIH, GCFA, Security+, CIH, or other related security operations certifications. 

Please note: The position requires you to have an Australian Citizenship and be willing to undertake Baseline (or preferably NV1) clearance to support work with Defence. For more information, please go to https://www.agsva.gov.au/applicants/eligibility-and-suitability 

Additional Information

To support your development, we offer:

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Employee share options for every team member, reflecting our commitment to shared success and ownership.
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

We value every person and every voice

We are committed to fostering, cultivating, and promoting a culture of diversity, equity and inclusion.

We know that an inclusive culture, and collective intelligence improves the decision-making processes and is critical to delivering exceptional outcomes for our clients and team. We encourage applications from those in marginalised and/or historically underrepresented communities within our workforce. Additionally, if you require any adjustments to the process, please let us know.

If you too share our purpose of helping governments and their agencies build more resilient, secure, equitable and prosperous communities, then you should apply today.

Recruitment and assessment process

The interview process at Scyne generally involves two to three interviews including a blend of behavioural, technical, and scenario-based questions to assess a candidate's alignment to the role (and other current or future positions), the team, the business, and our values.

Scyne’s approach to recruitment and selection is underpinned by key principles and expectations, ensuring we recruit and onboard a skilled and diverse workforce that is representative of the communities and organisations we serve. We ensure selection to roles is fair, with equal access provided, and appointments factor in but not limited to relative ability to fulfil the role, prior performance, potential and alignment with our values – taking unique experiences, perspectives, and contributions into consideration.

We carry out background checks on our people to ensure we have made a sound hiring decision and to protect the organisation and our clients from potential risk. If required, confirmation of a valid Commonwealth security clearance or the ability to obtain a Commonwealth security clearance.

Our principles and employment screening process adhere to the AS 4811:2022 Workforce Screening Standard.

We Value Every Person and Every Voice:

We are committed to fostering, cultivating, and promoting a culture of diversity, equity and inclusion.

We are passionate about improving outcomes with First Peoples, working in collaboration with government and community sectors towards programs which focus on First Nations clients, consumers and communities.  We recognise the knowledge, insights and capabilities of First Peoples. Their strength, resilience and cultural competence are highly valued.

We know that an inclusive culture, and collective intelligence improves the decision-making processes and is critical to delivering exceptional outcomes for our clients and team. We encourage applications from those in marginalised and/or historically underrepresented communities within our workforce. Additionally, if you require any adjustments to the process, please let us know

Recruitment and Assessment Process:

Scyne’s approach to recruitment and selection is underpinned by key principles and expectations, ensuring we recruit and onboard a skilled and diverse workforce that is representative of the communities and organisations we serve. We ensure selection to roles is fair, with equal access provided, and appointments factor in but not limited to relative ability to fulfil the role, prior performance, potential and alignment with our values – taking unique experiences, perspectives, and contributions into consideration.

We carry out background checks on our people to ensure we have made a sound hiring decision and to protect the organisation and our clients from potential risk. If required, confirmation of a valid Commonwealth security clearance or the ability to obtain a Commonwealth security clearance.