Cyber Security Operations Lead - Incident Response & Threat Hunting

Australian Secret Intelligence Service; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Australian Secret Intelligence Service in Canberra seeks a Cyber Security Operations Technical Lead to oversee incident response, investigations, and threat detection development. You will drive dashboards, analytics, and proactive threat hunts to protect critical ICT assets and sensitive information.

The role requires extensive leadership in cyber ops, strong SIEM and scripting skills, and the ability to translate government security frameworks into practical controls.

Qualifications

• Extensive experience leading cyber security operations and incident response.
• Advanced SIEM, data analytics, and scripting capabilities (Python/PowerShell).
• Experience leading complex incident response with forensics or malware analysis.
• Certifications; degree in Cyber Security/IT is preferred.

Responsibilities

• Lead monitoring, detection, and response to cyber activity impacting ASIS ICT environment.
• Lead technical investigations of security events and network activity.
• Develop detection engineering, dashboards, and threat detection capabilities.
• Lead proactive threat hunting using SIEM, data analytics and intelligence.
• Identify gaps and drive remediation with actionable insights.
• Provide technical leadership, mentoring, and coaching to staff.

Skills

Incident response

SIEM

Threat hunting

Python

PowerShell

Network forensics

Cloud security

Stakeholder comms

Leadership

Education

Bachelor's in Cyber Security

Bachelor's in Computer Science

Bachelor's in Information Technology

Professional certifications

Tools

SIEM platforms

Forensics tools

Malware analysis tools

Job description

Australian Secret Intelligence Service in Canberra seeks a Cyber Security Operations Technical Lead to oversee incident response, investigations, and threat detection development. You will drive dashboards, analytics, and proactive threat hunts to protect critical ICT assets and sensitive information.

The role requires extensive leadership in cyber ops, strong SIEM and scripting skills, and the ability to translate government security frameworks into practical controls.