Lead Cyber Security Threat Analysts

Whizdom; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Whizdom seeks a Lead Cyber Security Threat Analyst to join a high-performing security team. You will lead threat-driven analysis, assess threats, and support cyber defence strategies to strengthen incident response.

Ideal candidates have SOC experience, hands-on Splunk ES, and familiarity with EDR/NDR and SOAR. You will collaborate with technical leadership and operations teams to mitigate risks.

Qualifications

• Senior security analyst with hands-on SOC experience.
• Proficient with Splunk Enterprise Security and modern EDR/NDR tools.
• Ability to analyse threats and communicate risks clearly.
• Experience creating security playbooks and response procedures.

Responsibilities

• Lead threat-driven security analysis across complex environments.
• Assess emerging threats and coordinate response actions.
• Monitor, investigate, and report security events and incidents.
• Develop and improve incident response playbooks and procedures.
• Conduct vulnerability assessments and drive remediation.
• Review security controls and identify improvement areas.
• Establish ongoing security monitoring and event analysis processes.
• Support testing, evaluation, and assurance of security outcomes.
• Provide guidance to technical leadership and stakeholders.

Skills

SOC experience

Analytical skills

Communication skills

Threat analysis

Tools

Splunk Enterprise Security

EDR platforms

NDR technologies

SOAR solutions

Job description

About the Client

Our client is a highly regarded national security organisation responsible for protecting critical government systems and delivering advanced cyber security capabilities that support Australia's national interests. Operating in a fast-paced and mission-driven environment, they work at the forefront of cyber threat detection, intelligence analysis, and security operations.

This organisation offers the opportunity to contribute to nationally significant programs, working alongside experienced security professionals within a technically sophisticated environment focused on defending against evolving cyber threats.

About the Role

We are seeking an experienced Lead Cyber Security Threat Analyst to join a high-performing security team responsible for monitoring, assessing, and improving the security posture of critical systems and environments.

In this role, you will lead threat-driven security analysis activities, assess emerging threats and vulnerabilities, and support the development of effective cyber defence strategies. You will work closely with technical specialists, security leadership, and operational teams to identify risks, enhance detection capabilities, and strengthen incident response processes.

Key responsibilities include:

• Leading threat-driven security analysis across complex environments.
• Analysing intelligence sources to identify system-specific cyber threats.
• Monitoring and investigating security events and potential incidents.
• Developing and improving incident response plans, playbooks, and procedures.
• Conducting vulnerability assessments and recommending remediation activities.
• Reviewing existing security controls and identifying areas for improvement.
• Establishing processes for ongoing security monitoring and event analysis.
• Supporting testing, evaluation, and assurance activities for security outcomes.
• Providing cyber security expertise and guidance to technical leadership and stakeholders.

The Successful Candidate

To be successful in this position, you will bring strong experience within Security Operations Centre (SOC) environments and have a proven ability to identify, assess, and respond to cyber security threats.

You will demonstrate:

• Experience working as a Security Analyst within a SOC environment.
• Strong hands-on experience with Splunk Enterprise Security.
• Experience utilising Endpoint Detection and Response (EDR) platforms.
• Experience working with Network Detection and Response (NDR) technologies.
• Exposure to Security Orchestration, Automation and Response (SOAR) solutions.
• Strong analytical and problem-solving capabilities.
• The ability to communicate technical security risks and recommendations to a range of stakeholders.
• Experience developing cyber security procedures, playbooks, and response processes.

Highly regarded experience includes knowledge of Australian Government cyber security frameworks, information security policies, and industry best practices.

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

Why partner with Whizdom?

We're Whizdom. We view you as an extension of our strong, dependable brand and have differentiators which really are different! The Whizdom way:

• We pay our contractors same day you submit your timesheet!
• We are Level 3, DISP certified and have signed the Veteran Employment Commitment and been awarded the highest level of compliance to this important initiative, proactively assisting veterans transitioning from the forces to civilian roles. We've been lucky enough to win industry awards for our high level of process compliance and are ISO 9001 certified. Our commitment to reducing Greenhouse Gas Emissions has been accredited in line with large global organisations.
• We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.

Location:

The role is based in Canberra ACT, or Adelaide SA

Contract terms:

12 months from commencement date, plus 2x 12 month extensions

Experience Level:

Senior - EL1 Equivalent

Security Requirements:

Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not looking to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.

Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks.

Applications open until 8am 29 September 2026.