Lead Cyber Security Analyst

Talenza; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Talenza in Sydney is seeking a Lead Cyber Security Analyst to protect enterprise systems and guide the hybrid Security Operations Centre. The role combines hands-on incident response leadership with strategic cyber defence planning.

You will mentor analysts, drive threat-hunting initiatives, develop detection content and playbooks, and coordinate with MSSP and security teams to improve threat visibility.

Qualifications

• Extensive experience leading cyber incident response in large enterprises.
• Hands-on ability to investigate, contain, eradicate and recover from incidents.
• Proven threat hunting, threat detection and security monitoring capabilities.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of modern threats and MITRE ATT&CK framework.
• Experience developing detection content and incident response playbooks.

Responsibilities

• Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
• Act as the primary technical escalation point for complex security events and threats.
• Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
• Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
• Refine incident response playbooks, procedures and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.

Skills

Incident Response

Threat Hunting

Threat Detection

SIEM/EDR/XDR

MITRE ATT&CK

Security Analytics

Tools

SIEM

Job description

Lead Cyber Security Analyst

Hybrid - Sydney

We are seeking an experienced Lead Cyber Security Analyst to play a critical role in protecting enterprise systems, networks and sensitive information assets. Reporting to the Cyber Operations Manager, this hands‑on technical position will lead cyber incident response activities, proactive threat-hunting initiatives and the ongoing maturity of a hybrid Security Operations Centre (SOC).

Acting as the technical second‑in‑command within Cyber Operations, you will serve as the lead investigator during security incidents. This role combines deep technical expertise with the opportunity to influence cyber defence strategy and operational effectiveness across a large and complex enterprise environment.

Key Responsibilities

• Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
• Act as the primary technical escalation point for complex security events and threats.
• Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
• Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
• Refine incident response playbooks, procedures and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.

Required Experience & Skills

• Extensive experience in cyber security operations within a large enterprise environment.
• Strong hands‑on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of modern cyber threats, attacker techniques and the MITRE ATT&CK framework.
• Experience developing detection content, response playbooks and operational procedures.