At WorkCover Queensland our vision is to be the best worker’s compensation insurer, to make a positive difference to people’s lives and to keep Queenslanders working. Our flexible work environment allows you to be your best every day and contribute to the big picture.  

Our organisation is made up of individuals who collaborate and seek to engage others, working together as One Team. We embrace diversity and value people who bring personal energy and authenticity to everything they do. If you’re someone with a strong values-oriented compass and you want to achieve sustainable outcomes, you will find a great community at WorkCover.  

About the Opportunity: Cyber Security Lead – Detect & Respond 

WorkCover Queensland is investing significantly in its cyber security capability - expanding our team, uplifting maturity, and strengthening how we detect, respond to, and manage cyber incidents. It’s an exciting time to join our growing Cyber and Information Security function, where innovation, collaboration, and continuous improvement are at the heart of everything we do. 

Reporting to the Cyber Security Manager Detect, you will lead the Level 1 Detect and Respond team to deliver high-quality operational cyber services 24/7. Your focus will be on developing people, refining processes, and advancing our threat detection and incident response capabilities in line with the NIST Cyber Security Framework and MITRE ATT&CK. 

You’ll play a key role in the day-to-day management of incidents, ensuring WorkCover can rapidly detect, contain, and recover from threats while minimising impact on systems, people, and information assets. You’ll also drive automation, process improvement, and continuous learning within your team, fostering curiosity, collaboration, and technical excellence. 

In this role, you’ll translate that vision into action by: 

• Leading, coaching, and mentoring the Level 1 Detect & Respond team of engineers and trainees. 

• Supporting the Cyber Security Manager – Detect & Respond in delivering leading-edge operational services. 

• Designing and implementing advanced detection and response strategies using Microsoft Sentinel, Defender, and other cyber toolsets. 

• Streamlining workflows through ServiceNow integration and automation. 

• Managing incident response activities including triage, containment, resolution, and post-incident reviews. 

• Driving continuous tuning of SIEM alerts, automation of response playbooks, and integration of threat intelligence. 

• Ensuring effective queue management, classification, and reporting across operations. 

• Fostering a culture of continuous learning, improvement, and cyber awareness across the team. 

A bit about you 

You’re an experienced cyber security professional who thrives in a fast-paced operational environment. You combine deep technical expertise with strong leadership and mentoring skills and are passionate about building capability and improving processes. 

You communicate clearly and confidently, whether leading an incident, coaching your team, or working with senior stakeholders. You value curiosity, accountability, and teamwork in your approach and bring a practical mindset to solving complex challenges. 

You will also bring: 

• 5+ years’ experience in cyber security operations, with 2+ years leading or managing a small SOC or Level 1 team. 

• Strong experience with Microsoft Sentinel, Defender, Entra, Purview, and related technologies. 

• Demonstrated ability to automate and orchestrate response workflows within SIEM and associated toolsets. 

• Proven experience managing competing priorities in a regulated environment such as financial services. 

• Excellent communication and stakeholder engagement skills. 

• Tertiary qualifications in cyber security, information technology, or a related field (Microsoft AZ-500 certification preferred). 

A bit about us 

The Cyber Security team sits within our Digital and Technology Group and is growing through exciting investment and expansion. We’re a supportive, forward-thinking team focused on protecting WorkCover’s information assets and supporting our people through innovation, trust, and shared purpose. We take pride in what we do, celebrate our wins, and foster an environment where ideas and initiative are encouraged. 

Working in a collaborative team environment within a supportive and engaged organisation, you’ll enjoy a hybrid work model, access to personalised learning and development opportunities, and the holistic support of our health and wellbeing program. We offer industry competitive salaries, a generous superannuation scheme (including co-contribution), and study assistance. You can find out more about our Employee Benefits by visiting Working at WorkCover Qld. 

How do I apply? 

Please submit your resume along with a covering letter (no more than two pages) outlining your motivations and why you’re a strong fit for this role. Applications close at 5pm, Monday 27th October.  

Working in a collaborative team environment within a supportive and engaged organisation, you’ll enjoy a hybrid work model, access to personalised learning and development opportunities and the holistic support of our health and wellbeing program. We offer industry competitive salaries, a generous superannuation scheme (including co-contribution) and study assistance. You can find out more about our Employee Benefits by visiting Working at WorkCover Qld.  
 
We are committed to ensuring WorkCover reflects the diversity of the Queensland community. We welcome applications from First Nations peoples, members of the LGBTQIA+SB community, people of all ages, people who are neurodivergent, people with disability, and people from culturally and linguistically diverse backgrounds.