Cyber Threat Lead Security Analyst

ASJ Tech Pty Ltd; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

ASJ Tech Pty Ltd in Canberra is seeking a Lead Security Analyst – Cyber Threat Analyst (2 positions) for an onsite role in ACT/SA. The contract runs 12 months with two 12-month extensions, and a 40-hour week.

The start date is 30 November 2026, with applications closing 29 September 2026 at 10:00 AM Canberra time. The role focuses on threat-driven analysis, vulnerability assessment, incident monitoring, and developing response procedures in collaboration with technical teams and security

Qualifications

• Demonstrated experience working in a SOC as a Security Analyst.
• Experience using Splunk Enterprise Security for threat detection.

Responsibilities

• Perform threat-driven security analysis of systems.
• Analyse threat intelligence for system threats.
• Monitor security events and info for incidents.
• Develop and use incident response plans and playbooks.
• Analyse vulnerabilities and propose solutions.
• Review security controls for vulnerabilities.
• Develop procedures to monitor and analyse security events.
• Support testing and evaluation of deliverable systems and products.
• Support Technical Leadership as required.

Skills

SOC experience

Threat analysis

Incident monitoring

Playbooks

Tools

Splunk Enterprise Security

EDR

NDR

SOAR

Job description

ASJ Tech Pty Ltd | Defence (ASD) | Lead Security Analyst – Cyber Threat Analyst

Lead Security Analyst – Cyber Threat Analyst (2 positions)

Location: ACT, SA (Onsite)

Estimated Start Date: Monday, 30 November 2026

Contract: 12 months initial, with 2 x 12-month extension options

Maximum Hours: 40 hours per week

Security Clearance: Must be able to obtain Positive Vetting (TSPV required)

Applications Close: 29 September 2026, 10:00 AM Canberra time

Background

The Australian Signals Directorate (ASD) is a statutory agency in the Defence portfolio that defends Australia against global threats and advances national interests through the provision of foreign signals intelligence, cyber security and offensive cyber operations as directed by the Australian Government.

Role Overview

The Security Analyst will be responsible for assessing, monitoring, and strengthening the organisation's security posture through threat-driven analysis, vulnerability assessment, incident monitoring, and the development of response procedures. Working closely with technical teams and security leadership, the role ensures that systems are protected against evolving threats and that effective security controls and response processes are in place.

Key Duties and Responsibilities

• Perform analysis of system security based on a threat-driven approach.
• Analyse threat intelligence for system specific threats.
• Monitor security events and information for security incidents.
• Develop and use incident response plans and playbooks.
• Analyse security vulnerabilities and propose solutions.
• Review current system security controls for vulnerabilities.
• Develop procedures to monitor and analyse security information and events.
• Support, plan and conduct test and evaluation activities for deliverable systems and products.
• Support the Technical Leadership team as required.

Essential Criteria

• Demonstrated experience working in a SOC as a Security Analyst.
• Demonstrated experience in using Splunk Enterprise Security.
• Experience with Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms.
• Experience with a Network Detection and Response (NDR) platform.
• Experience with a Security Orchestration and Automated Response (SOAR) platform.

Desirable Criteria

• Demonstrated experience with or knowledge of Australian Government information security policies, the ASD Information Security Manual and Essential Eight.

Security and Work Location

The vendor must hold current Defence Industry Security Program (DISP) membership, and candidates must hold a current TSPV security clearance, or be able to obtain Positive Vetting. Work is based onsite in the ACT or SA, at the discretion of the assigned work area and subject to operational need; due to the nature of ASD's operations, not all work areas can accommodate work from home. Suitable candidates will be required to complete ASD's Organisation Suitability Assessment (OSA) prior to commencement, with placement into work areas based on operational needs. If no immediate business requirement is identified, a merit pool will be created for suitable candidates.