Manager, Threat Operations (Cybersecurity)

Location: Remote, Australia; operational leadership during APJ hours. Legal authorization to work in Australia is required without employer sponsorship.

Company

hirify.global provides cybersecurity services, including Managed Detection and Response.

What you will do

• Lead and develop MDR Team Leads and analysts through coaching, feedback, career development, hiring, onboarding, and succession planning.
• Lead MDR operational delivery during APJ hours, managing staffing, coverage, workload balancing, queue health, prioritization, service levels, and customer commitments.
• Monitor operational health, including demand, capacity, backlog, response times, investigation effort, quality, escalations, and operational risks.
• Coordinate follow-the-sun operations across APJ and other regions through clear ownership, handovers, escalations, and consistent standards.
• Improve triage, investigation quality, case handling, customer communication, readiness, tooling, automation, workflows, and operational resilience.
• Partner with Threat Intelligence, Detection Engineering, Incident Response, Product, Engineering, MDR leadership, and customer-facing teams on incidents, capacity planning, transformation, and continuous improvement.

Requirements

• 7+ years of experience in cybersecurity operations, Managed Detection and Response, Security Operations Center operations, incident response, or a related discipline, including at least 2 years leading people, teams, or operational functions.
• Experience leading high-volume, customer-facing security operations with responsibility for staffing, workload management, queue health, prioritization, service levels, quality, and operational outcomes.
• Proven people-leadership experience covering coaching, performance management, career development, hiring, onboarding, expectations, feedback, and accountability.
• Experience developing Team Leads, senior analysts, or other frontline security operations leaders.
• Experience in a global or 24x7 security operations environment, including coordination, escalation, and handover across distributed teams.
• Strong understanding of triage, investigation, escalation, response, customer communication, and security operations lifecycle.
• Strong technical understanding of endpoint, network, cloud, identity, and security telemetry, with the ability to assess investigation quality and make risk-based decisions.
• Experience managing operational and customer escalations and communicating complex situations to technical and executive stakeholders.
• Experience using operational metrics and data to identify workload, capacity, performance, and quality issues and deliver measurable improvements.
• Experience improving efficiency through process simplification, standardization, automation, or better use of technology while maintaining investigation quality and customer outcomes.
• Strong understanding of attacker tools, tactics, and techniques, including persistence, lateral movement, credential theft, ransomware, and defense evasion, with working knowledge of the MITRE ATT&CK framework.
• Experience collaborating across Detection Engineering, Threat Intelligence, Incident Response, Product, Engineering, and customer-facing teams.
• Strong judgment, decision-making, written communication, and verbal communication skills.
• Relevant professional experience in cybersecurity, security operations, or a related discipline. Formal qualifications and certifications are valued but not required where equivalent experience is demonstrated.

Nice to have

• Experience leading MDR or security operations teams across Australia or the broader APJ region.
• Experience working within global, distributed security operations and collaborating across regions and time zones.
• Experience improving security operations through automation, AI-assisted capabilities, process redesign, or operational transformation.
• Experience partnering with Detection Engineering and other security teams to improve detection quality and reduce unnecessary analyst workload.
• Cybersecurity or leadership certifications such as CISSP, GCIH, CISM, or equivalent.

Culture & Benefits

• Remote-first organization.
• Participation in a global 24x7 MDR service with cross-region collaboration.
• Focus on inclusive, accountable, high-performing teams, continuous improvement, operational resilience, and customer outcomes.