Cyber Threat Hunter & Incident Response Analyst

Medibank; Melbourne; On-site; AUD 90,000 - 130,000; Full time

Job summary

Medibank is seeking a Cyber Defence Analyst to join the Cyber Defence Team in Melbourne. You will monitor security alerts, investigate incidents, and apply ATT&CK-based analysis to detect and respond to threats.

This role collaborates with senior analysts to strengthen detection, response and threat hunting capabilities across endpoint, identity, network and cloud telemetry. You will work in a 24x7 security operations environment, leverage SIEM/EDR tools, and contribute to the ongoing

Qualifications

• Minimum 4 years’ experience in security operations or cyber defence.
• Experience with detection-as-code or threat hunting in 24x7 SOC.
• Strong in security alert triage and incident investigations.
• Experience with SIEM/EDR platforms and telemetry sources.
• Familiarity with attacker techniques and MITRE ATT&CK framework.

Responsibilities

• Monitor, triage and investigate security alerts across endpoint, identity, network and cloud telemetry.
• Perform initial incident analysis to understand scope, severity and impact.
• Escalate complex activity to senior analysts with evidence.
• Apply knowledge of attacker TTPs when analyzing alerts and incidents.
• Use MITRE ATT&CK to categorise activity and support investigations.
• Support maintenance and tuning of detections.
• Participate in threat hunting and control uplift activities.
• Maintain investigation notes, timelines and findings.
• Collaborate with incident response, IT and security engineering teams.

Skills

Detection-as-code

Threat hunting

SOC operations

Security alert triage

Incident investigations

MITRE ATT&CK

SIEM/EDR platforms

Analytical skills

Telemetry (email, endpoint, identity,

Education

Security certifications (Security+, BTL L1/L2, GCIH)

Tools

Microsoft Security Suite

Splunk / Falcon NGSiem

CrowdStrike

Falcon Suite

Job description

Medibank is seeking a Cyber Defence Analyst to join the Cyber Defence Team in Melbourne. You will monitor security alerts, investigate incidents, and apply ATT&CK-based analysis to detect and respond to threats.

This role collaborates with senior analysts to strengthen detection, response and threat hunting capabilities across endpoint, identity, network and cloud telemetry. You will work in a 24x7 security operations environment, leverage SIEM/EDR tools, and contribute to the ongoing