Cyber Security Threat Analyst - Whizdom Recruitment

Whizdom Recruitment; Canberra, Adelaide; On-site; AUD 120,000 - 160,000; Full time

Job summary

Whizdom Recruitment is assisting a national security organisation with a senior Lead Cyber Security Threat Analyst role based in Canberra ACT or Adelaide SA. The role focuses on threat-driven security analysis, vulnerability assessment, and strengthening incident response across complex environments.

You will work with security leadership and technical specialists to identify risks, enhance detection capabilities, and implement effective cyber defence strategies.

Qualifications

• Experience working in a Security Operations Centre (SOC) environment.
• Hands-on experience with Splunk Enterprise Security.
• Experience with Endpoint Detection and Response (EDR) platforms.
• Experience with Network Detection and Response (NDR) technologies.
• Exposure to Security Orchestration, Automation and Response (SOAR) solutions.

Responsibilities

• Lead threat-driven security analysis across complex environments.
• Analyse intelligence sources to identify system-specific cyber threats.
• Monitor and investigate security events and potential incidents.
• Develop and improve incident response plans and playbooks.
• Conduct vulnerability assessments and recommend remediation actions.
• Review security controls and identify improvement opportunities.
• Establish continuous security monitoring and event analysis processes.
• Support testing, evaluation, and assurance activities for security outcomes.
• Provide guidance to technical leadership and stakeholders.

Skills

SOC experience

Splunk ES

EDR

NDR

SOAR

Threat analysis

Tools

Splunk Enterprise Security

Job description

About the Client

Our client is a highly regarded national security organisation responsible for protecting critical government systems and delivering advanced cyber security capabilities that support Australia's national interests. Operating in a fast-paced and mission-driven environment, they work at the forefront of cyber threat detection, intelligence analysis, and security operations. This organisation offers the opportunity to contribute to nationally significant programs, working alongside experienced security professionals within a technically sophisticated environment focused on defending against evolving cyber threats.

About the Role

We are seeking an experienced Lead Cyber Security Threat Analyst to join a high-performing security team responsible for monitoring, assessing, and improving the security posture of critical systems and environments. In this role, you will lead threat-driven security analysis activities, assess emerging threats and vulnerabilities, and support the development of effective cyber defence strategies. You will work closely with technical specialists, security leadership, and operational teams to identify risks, enhance detection capabilities, and strengthen incident response processes.

Key responsibilities include:

• Leading threat-driven security analysis across complex environments.
• Analysing intelligence sources to identify system-specific cyber threats.
• Monitoring and investigating security events and potential incidents.
• Developing and improving incident response plans, playbooks, and procedures.
• Conducting vulnerability assessments and recommending remediation activities.
• Reviewing existing security controls and identifying areas for improvement.
• Establishing processes for ongoing security monitoring and event analysis.
• Supporting testing, evaluation, and assurance activities for security outcomes.
• Providing cyber security expertise and guidance to technical leadership and stakeholders.

The Successful Candidate

To be successful in this position, you will bring strong experience within Security Operations Centre (SOC) environments and have a proven ability to identify, assess, and respond to cyber security threats.

You will demonstrate:

• Experience working as a Security Analyst within a SOC environment.
• Strong hands-on experience with Splunk Enterprise Security.
• Experience utilising Endpoint Detection and Response (EDR) platforms.
• Experience working with Network Detection and Response (NDR) technologies.
• Exposure to Security Orchestration, Automation and Response (SOAR) solutions.
• Strong analytical and problem-solving capabilities.
• The ability to communicate technical security risks and recommendations to a range of stakeholders.
• Experience developing cyber security procedures, playbooks, and response processes.

Highly regarded experience includes knowledge of Australian Government cyber security frameworks, information security policies, and industry best practices.

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.

Location: The role is based in Canberra ACT, or Adelaide SA
Contract terms: 12 months from commencement date, plus 2x 12 month extensions
Experience Level: Senior - EL1 Equivalent
Security Requirements: Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not looking to upgrade an existing clearance for this position. A OSA (Organisational Suitability Assessment) will be required for this position.

Applications open until: 8am 29 September 2026.