Lead Cyber Security Analyst Incident Response

Department of Customer Services, Open Data and Small and Family Business; City of Brisbane; On-site; AUD 140,000 - 170,000; Full time

Job summary

Department of Customer Services, Open Data and Small and Family Business – Brisbane QLD is seeking a Principal Cyber Security Analyst AO7 to lead the Queensland Government Cyber Security Unit (QGCSU) in strengthening Whole of Government cyber defence capabilities. This role provides technical leadership across detection, response, threat intelligence and analytics.

You will drive incident response, threat hunting, SOC tooling, SOPs, and strategic planning for SOC operations, while mentoring

Responsibilities

• Act as the primary technical escalation point for SOC operations including complex or high-severity incidents, providing technical guidance and decision making support to the SOC team.
• Create, tune and optimise detection rules, ensuring accurate threat identification and minimal false positives.
• Lead and coordinate the end-to-end cyber incident response process, including detection, containment, eradication, recovery, and post-incident review to minimise risk exposure for Government entities.
• Lead the proactive threat hunting function, identifying and mitigating advanced threats and implementing detections for emerging threats.
• Evaluate, implement, and optimise SOC tools and technologies to enhance detection, response and threat hunting capabilities.
• Lead initiatives to improve and mature SOC processes, ensuring alignment with industry best practices.
• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks to ensure operational consistency and efficiency.
• Provide input into strategic planning for SOC operations, initiatives and resource allocation through analysing trends and metrics.
• Provide mentorship, guidance and support to SOC analysts to enhance team capability fostering a culture of continuous learning and professional development.
• Contribute to the broader security community across whole of Government through presenting at security meet ups/forums, Communities of Practice, and other cross-organisational environments.

Job description

Department of Customer Services, Open Data and Small and Family Business – Brisbane QLD is seeking a Principal Cyber Security Analyst AO7 to lead the Queensland Government Cyber Security Unit (QGCSU) in strengthening Whole of Government cyber defence capabilities. This role provides technical leadership across detection, response, threat intelligence and analytics.

You will drive incident response, threat hunting, SOC tooling, SOPs, and strategic planning for SOC operations, while mentoring