Lead Cyber Defense Analyst - Splunk & IR (Hybrid)

Experis (Austria); Melbourne; Hybrid; AUD 160,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

On-call roster

National Police Check

Job summary

Experis Australia is seeking a Principal Cyber Security Analyst to lead advanced cyber defence, incident response, and tooling uplift for a large enterprise in Melbourne. Hybrid work with on-site days is offered.

You’ll guide a team of cyber analysts, coordinate across stakeholders, and drive assurance across ISO27001, NIST, CIS, and ASD ISM controls. You will stay ahead of threats, supervise vulnerability management, and continuously improve SOC capabilities while collaborating with internal

Qualifications

• This role requires postgraduate qualifications or equivalent cyber security/IT experience.
• Certifications such as CISSP, GIAC, or ITIL Practitioner are desirable.
• Strong experience with SIEM platforms (Splunk preferred) and threat hunting.

Responsibilities

• Lead cyber defence and incident response operations across enterprise environments.
• Mentor a team of cyber analysts and foster a high‑performance culture.
• Monitor security systems, investigate incidents, and implement mitigations.
• Analyse logs and threat intel to develop response plans and KPIs.
• Evaluate and deploy new security tools and processes.

Skills

Splunk/SIEM

Threat Hunting

Incident Response

Leadership

Security Tooling

Threat Modelling

Stakeholder Engagement

Education

Postgraduate cyber security or IT

Tools

Splunk Enterprise Security

SPL

Threat intelligence platforms

Job description

Experis Australia is seeking a Principal Cyber Security Analyst to lead advanced cyber defence, incident response, and tooling uplift for a large enterprise in Melbourne. Hybrid work with on-site days is offered.

You’ll guide a team of cyber analysts, coordinate across stakeholders, and drive assurance across ISO27001, NIST, CIS, and ASD ISM controls. You will stay ahead of threats, supervise vulnerability management, and continuously improve SOC capabilities while collaborating with internal