Security Operations and Engineering Manager

About the role

Are you passionate about cybersecurity and ready to lead a high-performing team? We're seeking a Security Operations and Engineering Manager to play a pivotal role in strengthening auDA's cybersecurity posture and ensuring the resilience of our information assets and the .au DNS.

You'll lead technical security operations and engineering practices, manage incident response, and drive continuous improvement in our security controls and processes. This is a hands-on leadership role, reporting directly to the Chief Information Security Officer, with the opportunity to make a real impact on Australia's internet infrastructure.

Key Responsibilities

• Lead and coach a team of security professionals, fostering a culture of excellence and continuous improvement.
• Oversee threat detection, response, and vulnerability management in collaboration with our Managed SOC provider.
• Design, implement, and maintain technical security controls (EDR, IAM, Logging, Cloud Security, Application Security).
• Drive regular threat hunting, penetration testing, and red teaming exercises.
• Lead incident response activities, including planning, coordination, and post-incident reviews.
• Provide expert security guidance to internal and external stakeholders.
• Support delivery of auDA's Cyber Security Strategy and contribute to audits and assurance activities.

What we're looking for

• Minimum 5 years' experience in a dedicated Security Operations Manager role and at least 10 years in security-related positions.
• Proven experience leading and mentoring security teams.
• Strong background in threat and vulnerability management, incident response, and technical security control implementation.
• Demonstrated experience implementing and maintaining technical security controls in alignment with recognized industry standards (e.g. ISO 27002, NIST & ACSC's Essential Eight).
• A strong background in designing, implementing, and reviewing solutions to achieve security outcomes and mitigate risks effectively.
• Experience performing threat modelling to identify and address security threats proactively.
• Ability to drive and implement strategic improvements in security controls and processes
• Experience with SIEM/SOAR, threat modelling, and working with managed security service providers.
• Excellent communication, stakeholder engagement, and problem-solving skills.
• Experience in regulated industries (e.g., financial services, critical infrastructure) is advantageous.
• Relevant degree in technology or security is desirable.

What we offer

At .au Domain Administration Ltd., we are committed to providing a supportive and rewarding work environment. As a member of our team, you will have access to a range of benefits, including:

• Competitive salary and salary packaging
• Flexible working arrangements
• Ongoing professional development and training opportunities
• Comprehensive wellbeing programs
• An inclusive and collaborative culture that values your contributions

About us

.au Domain Administration (auDA) is the administrator of the .au domain name system (DNS)—Australian critical infrastructure relied on by millions of internet users. As a not-for-profit endorsed by the Federal Government, our mission is to champion an open, free, secure, and global internet for the benefit of all Australians.

Additional Information

The successful candidate will be required to satisfactorily complete a National Police, Right to Work and Bankruptcy checks. An AusCheck Critical Infrastructure Background Check will need to be conducted and there may be a need to obtain Government security clearances as part of this role.

How to Apply

To get started, simply click on Apply button and submit your up-to-date resume and cover letter.

Applications close at 5PM, Fri 31 October 2025.