Lead Cyber Security Analyst

Talenza; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Talenza is seeking an experienced Lead Cyber Security Analyst to protect enterprise systems in a hybrid Sydney environment. Reporting to the Cyber Operations Manager, this hands-on role leads incident response, threat hunting, and the ongoing maturity of a hybrid SOC.

You will act as the technical deputy, lead investigations during security incidents, and shape defence strategy across a large enterprise. The role requires deep expertise with SIEM, EDR/XDR, MITRE ATT&CK and the development of

Qualifications

• Extensive experience in cyber security operations within a large enterprise environment.
• Hands-on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of MITRE ATT&CK and modern threat techniques.
• Experience developing detection content and incident response playbooks.

Responsibilities

• Lead the technical investigation, containment, eradication and recovery of incidents.
• Act as the primary technical escalation point for complex events.
• Provide technical oversight of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK.
• Develop and enhance detection rules and monitoring capabilities.
• Refine incident response playbooks and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats and industry trends to continually improve cyber defence capability.

Skills

Cyber operations

Incident response

Threat hunting

Threat detection

SIEM

EDR/XDR

MITRE ATT&CK

Detection content

Playbooks

Operational procedures

Tools

SOAR

SIEM

EDR/XDR

Job description

Lead Cyber Security Analyst

Hybrid - Sydney

We are seeking an experienced Lead Cyber Security Analyst to play a critical role in protecting enterprise systems, networks and sensitive information assets. Reporting to the Cyber Operations Manager, this hands‑on technical position will lead cyber incident response activities, proactive threat hunting initiatives and the ongoing maturity of a hybrid Security Operations Centre (SOC).

Acting as the technical second-in-command within Cyber Operations, you will serve as the lead investigator during security incidents. This role combines deep technical expertise with the opportunity to influence cyber defence strategy and operational effectiveness across a large and complex enterprise environment.

Key Responsibilities

• Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
• Act as the primary technical escalation point for complex security events and threats.
• Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
• Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
• Refine incident response playbooks, procedures and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.

Required Experience & Skills

• Extensive experience in cyber security operations within a large enterprise environment.
• Strong hands‑on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of modern cyber threats, attacker techniques and the MITRE ATT&CK framework.
• Experience developing detection content, response playbooks and operational procedures.