Cyber Security Defence Lead
- Full-time
Company Description
Intellihub is committed to simplifying the energy transition – as a leader in smart metering across ANZ and innovator of solar, battery, EV, virtual power plant and home electrification solutions.
With strong leadership supporting you, a career at Intellihub is defined by flexibility, growth and a deeply fulfilling experience. We're changing energy – bring yours.
Job Description
You’ll lead Intellihub’s cyber defence operations, ensuring we can detect, respond to and recover quickly from security threats with minimal business impact. You will own the end‑to‑end effectiveness of our cyber defence capability across monitoring, incident response, threat hunting, tooling optimisation and operational readiness.
Reporting directly to the CISO, this role has strong visibility and influence. You will help lift cyber defence capability, drive continuous improvement, and clearly communicate security risks and impacts so leaders can make informed business decisions.
Qualifications
- Tertiary qualifications in Cyber Security, IT, Computer Science, or related discipline.
- 7-10+ years in security operations/incident response; 3+ years in technical team leadership.
- Hands‑on expertise with SIEM, EDR, SOAR, NDR, and Email security.
- Strong knowledge of MITRE ATT\&CK, Windows/Linux internals, network protocols, identity attacks, and modern attack chains (cloud and SaaS).
- Experience in cloud security across Azure/M365, and AWS.
- Demonstrated ability to run major incidents, make time‑bound decisions, and coordinate complex response with multiple third parties and internal stakeholders.
- Familiarity with forensics (host/network), log analysis, and scripting/automation (PowerShell, Python).
- Understanding of NIST CSF, ISO 27001, CIS Controls, and audit requirements.
- Excellent communication (technical and executive), stakeholder management, and documentation skills and a strong ability to align diverse teams toward swift remediation.
- An analytical mindset with the ability to independently troubleshoot complex technical security problems.
- Ability to design and build resilient runbooks, measurable processes, SLAs and detection standards to support reliable 24×7 operations.
- Proven technical depth to conduct root cause analysis across endpoint, network, identity and cloud stacks.
Additional Information
We offer a dynamic and inclusive workplace that values collaboration and diversity. With a flexible hybrid working mode, we prioritise work-life balance while fostering personal and professional growth. Our innovative culture provides opportunities for career development, access to industry-leading tools, and a strong commitment to employee well-being, all supported by a competitive salary and benefits package.
Sound exciting? Apply now and be part of a team that's shaping the future of energy.