Cyber Threat Intelligence Specialists

Whizdom; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Whizdom is seeking an experienced Cyber Threat Intelligence Specialist to join a Canberra-based cyber security team delivering actionable intelligence for operations, risk assessments, and capability development. You will analyse threats across tactical to strategic levels, research adversaries, and guide defensive improvements.

You will contribute to detection engineering, SIEM modernization, and intelligence-driven security uplift while mentoring peers and collaborating with cross-functional

Qualifications

• CTI expertise and threat intelligence experience.
• SOC environments exposure.
• Incident response and intrusion analysis experience.

Responsibilities

• Conduct all-source cyber threat intelligence collection and analysis.
• Identify, assess and contextualise current and emerging threats.
• Produce intelligence reports, threat assessments and briefings for technical and non-technical stakeholders.
• Research threat actors, attack vectors and adversary TTPs.
• Support incident response and defensive operations activities.
• Contribute to detection engineering and SIEM enhancements.
• Develop cyber threat intelligence processes and reporting frameworks.
• Collaborate with security, intelligence and operations teams.
• Provide technical leadership to support team capability development.

Skills

CTI

SOC experience

Incident response

Detection engineering

SIEM technologies

Threat hunting

Adversary profiling

Risk assessment

Reverse engineering

Intelligence reporting

Job description

About the Client

Our client is a large Australian Government organisation responsible for delivering critical national capabilities and protecting highly sensitive information and systems. Operating in a complex and evolving threat environment, they are investing in advanced cyber security capabilities to strengthen resilience, manage risk, and support informed decision-making across critical technology environments.

About the Role

We are seeking an experienced Cyber Threat Intelligence Specialist to join a high-performing cyber security team responsible for identifying, assessing, and prioritising cyber threats to complex and sensitive ICT environments.

In this role, you will deliver actionable intelligence to support cyber security operations, risk assessments, authorisation activities, and capability development initiatives. You will work across tactical, operational, and strategic levels, researching emerging threats, analysing adversary behaviours, and providing intelligence that enables effective cyber defence outcomes.

Key responsibilities include:

• Conducting all-source cyber threat intelligence collection and analysis.
• Identifying, assessing, and contextualising current and emerging cyber threats.
• Producing intelligence reports, threat assessments, and briefings for technical and non-technical stakeholders.
• Researching threat actors, attack vectors, and adversary tactics, techniques, and procedures (TTPs).
• Supporting incident response, intrusion analysis, and defensive cyber operations activities.
• Contributing to security capability uplift initiatives, including detection engineering, SIEM enhancement, and intelligence-driven security improvements.
• Developing and refining cyber threat intelligence processes and reporting frameworks.
• Collaborating with cyber security, intelligence, and operational stakeholders across multiple teams.
• Providing guidance, mentoring, and technical leadership to support team capability development.

The Successful Candidate

To be successful in this role, you will possess demonstrated experience in cyber threat intelligence, cyber security operations, or intelligence analysis within a complex enterprise environment.

You will bring experience across several of the following areas:

• Cyber Threat Intelligence (CTI)
• Security Operations Centre (SOC) environments
• Incident response and intrusion analysis
• Detection engineering and SIEM technologies
• Cyber security engineering
• Threat hunting and intelligence-led investigations
• Threat actor profiling and adversary analysis
• Cyber risk assessment and security assurance activities
• Reverse engineering and technical research
• Intelligence reporting and briefing development

Desirable experience includes:

• ICT risk assessments and security reporting.
• Vulnerability assessment or red team activities.
• Security assessment and authorisation frameworks within government environments.
• Experience supporting complex or classified technology environments.

What's on Offer

• Opportunity to work on nationally significant cyber security challenges.
• Exposure to complex and evolving threat landscapes.
• Collaborative and highly skilled cyber security professionals.
• Opportunities to contribute to capability development and innovation initiatives.
• Long-term engagement within a Canberra-based team.
• Flexible working arrangements available on a case-by-case basis.
• The chance to make a meaningful impact on the protection of critical government systems and information.

Location:

Canberra, ACT – no remote/hybrid options available

Contract Duration:

Until 30 June 2026 + 2 x 12 month extension options

Security Requirements

To be eligible for this role, you must be an Australian Citizen. Due to the work environment, our client has requested that all candidates are required to hold current TSPV Security Clearance.