Cyber Security Threat & Detection Specialist

Charterhouse; Sydney; Hybrid; AUD 141,000 - 191,000; Full time

Job summary

Charterhouse in Sydney is seeking a Cyber Threat & Detection Specialist to join a large enterprise cyber security function on a 6-month contract. You will work across threat detection, hunting and incident response to strengthen the organisation’s ability to identify and respond to sophisticated cyber threats.

The role includes SIEM and log analysis (Splunk and Microsoft Sentinel), MITRE ATT&CK-based investigations, and collaboration with technical teams during security events, with hybrid work

Qualifications

• Hands-on experience in enterprise cyber security environments.
• Experience with threat detection and incident response.
• Proficiency in incident response playbooks and containment.
• Experience with Python, scripting, automation or detection-as-code.

Responsibilities

• Detect, investigate and hunt threats across enterprise environments.
• Lead cyber incident response and remediation efforts.
• Develop and tune detection rules and SIEM use cases.
• Collaborate with security and technology teams during security events.
• Apply MITRE ATT&CK framework to investigations.

Skills

Threat hunting

Security Operations

Incident response

SIEM experience

MITRE ATT&CK

Python scripting

Threat intelligence

Tools

Splunk

Microsoft Sentinel

EDR platforms

Job description

Cyber Security Threat & Detection Specialist

Cyber Threat & Detection SpecialistSydney | Hybrid | 6-Month Contract | ~$900/day incl. super | Potential Extension

We are seeking experienced Cyber Threat & Detection Specialists to join a large enterprise cyber security function in Sydney on an initial 6-month contract, with strong potential for extension.

This is an opportunity to work across threat detection, threat hunting, cyber incident response and adversary-focused security operations, helping strengthen the organisation’s ability to identify, investigate and respond to sophisticated cyber threats.

The Opportunity You’ll be part of a highly capable cyber defence environment, working across areas including:

• Threat detection, investigation and hunting across enterprise environments
• Cyber incident response and remediation
• SIEM and log analysis, including Splunk and/or Microsoft Sentinel
• Development and tuning of detection rules and use cases
• Applying MITRE ATT&CK and an adversarial mindset to investigations
• Analysing threat actor behaviour, vulnerabilities and indicators of compromise
• Supporting incident response playbooks and continuous improvement
• Working across cloud, identity, endpoint, network and security platforms
• Automating and improving security operations and detection capabilities
• Collaborating with technical teams and senior stakeholders during security events

Cyber Threat & Detection SpecialistSydney | Hybrid | 6-Month Contract | ~$900/day incl. super | Potential Extension

We are seeking experienced Cyber Threat & Detection Specialists to join a large enterprise cyber security function in Sydney on an initial 6-month contract, with strong potential for extension.

This is an opportunity to work across threat detection, threat hunting, cyber incident response and adversary-focused security operations, helping strengthen the organisation’s ability to identify, investigate and respond to sophisticated cyber threats.

The Opportunity You’ll be part of a highly capable cyber defence environment, working across areas including:

• Threat detection, investigation and hunting across enterprise environments
• Cyber incident response and remediation
• SIEM and log analysis, including Splunk and/or Microsoft Sentinel
• Endpoint Detection & Response (EDR) technologies
• Development and tuning of detection rules and use cases
• Applying MITRE ATT&CK and an adversarial mindset to investigations
• Analysing threat actor behaviour, vulnerabilities and indicators of compromise
• Supporting incident response playbooks and continuous improvement
• Working across cloud, identity, endpoint, network and security platforms
• Automating and improving security operations and detection capabilities
• Collaborating with technical teams and senior stakeholders during security events

What We're Looking For We’re interested in candidates coming from one or more of the following backgrounds:

• Cyber Threat Defence / Security Operations
• Threat Hunting / Adversary Operations
• Cyber Incident Response
• Threat Detection Engineering
• SOC / Security Engineering

You don't need to tick every box. We're particularly interested in people who can demonstrate strong hands-on experience in enterprise cyber security environments, with expertise in areas such as:

• Splunk, Sentinel or another enterprise SIEM
• EDR / endpoint security platforms
• Threat hunting and security investigations
• Incident response
• MITRE ATT&CK / threat actor TTPs
• Detection engineering and SIEM use-case development
• Malware analysis, penetration testing or digital forensics
• Python, scripting, automation or detection-as-code
• Cloud and enterprise infrastructure security