Triskele Labs is one of Australia's leading sovereign cyber security firms, delivering Managed Detection & Response (MDR), Digital Forensics & Incident Response (DFIR), Offensive Security, and Governance, Risk & Compliance (GRC) services to regulated enterprises, government, and the higher education sector. Built over more than a decade, founder-led and independently owned, we partner with clients operating under some of Australia's most demanding regulatory regimes.
Sovereign Australian ownership, deep technical capability, and front-line threat intelligence from one of the most active practices in the country sit at the centre of how we differentiate.
The opportunity
This is a senior technical individual contributor role created to lead in-account technical advisory across our enterprise client base. The role is designed for an experienced practitioner who wants to operate at the front of the Australian cyber security market as a trusted technical voice across our most strategic accounts, without managing a team and without carrying a commercial quota.
You will be the technical advisor embedded across our enterprise accounts, running the technical narrative between Strategic Account Manager touchpoints, interpreting threat data and detection outcomes for our clients, and surfacing the control gaps and forward-looking opportunities that strengthen client security posture and deepen our relationships.
This is not a commercial role. It is not a delivery role. It is a senior technical advisory role focused on the customer relationship, customer success, and the technical narrative that sits underneath both.
What you'll do
Lead in-account technical advisory
- Operate as the trusted technical voice across our enterprise client base, embedded in the security leadership conversations of each account.
- Run monthly and quarterly customer cadences with technical depth, interpreting the data and contextualising it against the broader threat landscape rather than presenting metrics.
- Brief security leadership on threat trends, patterns we are observing across the broader practice, and what they mean for the client's specific environment.
- Be the named technical advisor that the CISO and senior security leaders turn to for input between formal review cycles.
Translate threat intelligence into client value
- Take observations from our DFIR, detection engineering, and threat hunting practices and translate them into client-specific narratives and recommendations.
- Connect threat patterns to control gaps and opportunities across MDR, DFIR, breach attack simulation, threat hunting, identity and access management, data loss prevention, GRC, and offensive security.
- Use front-line case material to drive credibility, technical depth, and forward-looking conversations with our clients.
Surface and shape expansion opportunities
- Identify the control gaps, missing log sources, detection coverage limitations, and security maturity opportunities within each account.
- Surface those observations to Strategic Account Managers as commercial conversations, providing the technical case underneath.
- Partner with Sales Engineers on the technical scoping of expansion engagements within existing accounts.
- Drive net retention and account expansion through technical credibility and trusted advisor positioning.
Own customer health and renewal protection
- Own the technical relationship that protects renewal and retention across each account.
- Identify and act on early signals of customer health risk before they become renewal risk.
- Operate alongside Strategic Account Managers as the technical complement to the commercial relationship.
- Be the reason the client wants to stay, before the renewal conversation begins.
Cross-business integration
- Partner with our MDR, DFIR, Offensive Security, GRC, and Platform Engineering teams to ensure clients benefit from the full breadth of our capability.
- Bring practical insight from the client base back into delivery and platform engineering, contributing to how our services evolve.
- Operate as a senior technical voice within the broader Triskele Labs practice, contributing to thought leadership, content, and sector engagement where appropriate.
Mentor and uplift the Technical Customer Success function
- Mentor more junior Technical Customer Success Managers as the function grows.
- Contribute to the operating model, playbooks, and methodologies of the function.
- Set the standard for what excellent technical customer success looks like at Triskele Labs.
Requirements
Essential experience
- Genuine technical depth across modern security operations — established practitioner background in managed detection and response, security operations, SIEM platforms, detection engineering, threat hunting, or a closely related discipline.
- Pattern recognition — ability to see across multiple client environments and the broader threat landscape, and translate that into client-relevant narrative and recommendations.
- Established credibility in front of senior security leadership — comfortable engaging directly with CISOs, CIOs, audit and risk committees, and senior security and IT leaders. Operates as a peer, not as a reporter.
- Background — likely from a senior practitioner role within an MDR or MSSP, senior detection engineering or threat hunting role, senior cyber consulting, an in-house CISO or senior security leadership role, or a senior technical advisory role within a cyber services firm.
- Customer-facing experience — significant time spent in customer-facing technical advisory work, not purely internal delivery or operations.
- Work rights — eligible to work in Australia.
Highly regarded
- Multi-domain awareness — strong working knowledge across identity and access management, data loss prevention, incident response, offensive security workflows, and the broader Australian regulatory landscape.
- Experience operating in regulated environments across financial services, government, critical infrastructure, healthcare, or higher education.
- Credentials such as CISSP, CISM, GIAC certifications, or vendor-specific senior architect certifications.
Benefits
What we offer
- A senior individual contributor seat in one of Australia's most established sovereign cyber security firms.
- A meaningful career path within a defined Technical Customer Success function, with progression to Head of as the function scales.
- Significant autonomy and ownership of the technical advisory function across enterprise accounts.
- A platform of real DFIR, detection engineering, and offensive security capability to work from.
- Direct partnership with Strategic Account Managers, Sales Engineers, and the executive team.
- Flexible working arrangements.
Working at Triskele Labs
Triskele Labs is a sovereign Australian business, founder-led and independently owned. We are direct, we value honest and rigorous thinking, and we expect our senior people to set the tone for the wider team.
We back our people, we hold a high bar, and we are building something genuinely differentiated in the Australian market.
Application Requirements
Applications must include both a CV and a cover letter addressed to Billye Atout. Applications without a cover letter will not be considered.
Skills Required
- Established practitioner experience in managed detection and response, security operations, SIEM platforms, detection engineering, threat hunting, or a closely related cybersecurity discipline
- Strong working knowledge of identity and access management, data loss prevention, incident response, offensive security workflows, and the Australian regulatory landscape
- Ability to interpret patterns across client environments and the broader threat landscape, translating them into client-relevant recommendations
- Significant experience engaging directly with CISOs, CIOs, audit and risk committees, and senior security or IT leaders
- Senior background in an MDR or MSSP, detection engineering, threat hunting, cyber consulting, CISO or senior security leadership, or technical advisory role within a cybersecurity services firm
- Significant customer-facing technical advisory experience
- Strong written communication and presentation skills for executive briefings, forums, and review cycles
- Ability to work autonomously and remain accountable for customer outcomes
- CISSP, CISM, GIAC, or vendor-specific senior architect certification
- Established relationships across the Australian CISO and senior security community
- Public technical profile through speaking, writing, sector forums, or industry body contributions
- Experience working in regulated financial services, government, critical infrastructure, healthcare, or higher education environments
What We Do
Triskele Labs is one of Australia’s fastest growing cybersecurity companies. We deliver services including traditional projects such as Penetration Testing, Compliance and Risk Management through to new breed services including 24*7*365 Security Operations and outsourced Cybersecurity Managers to ensure we are a complete cybersecurity solution centre. Our team of experts leverage elite threat intelligence to provide the highest level of cybersecurity professional services. We go the extra mile to demystify cybersecurity and become your trusted partner by developing customised programs that deliver on your specific needs to meet your budget. Our holistic approach allows us to achieve multiple point security solutions to protect your IT infrastructure against the global threat landscape. We are continually improving to deliver whatever it takes through a customer focused partnership where honesty, integrity and passion drive everything we do. We believe in delivering robust outcomes and solutions that defend, protect and manage your networks and systems to significantly mitigate your risks.
.png){kind=logo}
