Lead Cyber Security Analyst

Talenza; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

Talenza in Sydney is seeking a Lead Cyber Security Analyst to lead incident response, threat hunting and ongoing maturity of our hybrid SOC. This hands-on role places you as technical second-in-command within Cyber Operations, guiding investigations and improving defence capabilities across a large enterprise.

You will mentor security analysts, oversee detection content and automation workflows, and work closely with stakeholders to strengthen incident readiness amid evolving threats.

Qualifications

• Extensive experience in cyber security operations within a large enterprise.
• Proven capability in cyber incident response and investigations.
• Strong threat hunting and security monitoring skills.
• Deep knowledge of MITRE ATT&CK and modern attacker techniques.
• Experience developing detection content and incident response playbooks.

Responsibilities

• Lead technical investigations, containment, eradication and recovery of incidents.
• Serve as primary escalation point for complex security events.
• Develop and enhance detection rules and monitoring capabilities.
• Mentor analysts and support security exercises and readiness.
• Drive continuous improvement in security operations and threat visibility.

Job description

We are seeking an experienced Lead Cyber Security Analyst to play a critical role in protecting enterprise systems, networks and sensitive information assets. Reporting to the Cyber Operations Manager, this hands-on technical position will lead cyber incident response activities, proactive threat hunting initiatives and the ongoing maturity of a hybrid Security Operations Centre (SOC).

Acting as the technical second-in-command within Cyber Operations, you will serve as the lead investigator during security incidents. This role combines deep technical expertise with the opportunity to influence cyber defence strategy and operational effectiveness across a large and complex enterprise environment.

Hybrid - Sydney

Key Responsibilities

• Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
• Act as the primary technical escalation point for complex security events and threats.
• Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
• Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
• Refine incident response playbooks, procedures and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.

Required Experience & Skills

• Extensive experience in cyber security operations within a large enterprise environment.
• Strong hands-on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of modern cyber threats, attacker techniques and the MITRE ATT&CK framework.
• Experience developing detection content, response playbooks and operational procedures.