Lead Cyber Threat & Incident Response Analyst

Remote Pty; Canberra; On-site; AUD 140,000 - 195,000; Full time

Job summary

Remote Pty is seeking a Lead Cyber Security Threat Analyst in Canberra to drive threat-driven reviews of system security. You will analyse threat intelligence, monitor events for incidents, and develop incident response playbooks to strengthen defenses across deliverables.

You will work with the leadership team to assess vulnerabilities, review controls, and implement monitoring procedures. Strong collaboration across a defence and government-focused environment is expected.

Qualifications

• Demonstrated experience working in a SOC as a Security Analyst.
• Demonstrated experience in using Splunk Enterprise Security.
• Experience with Endpoint Detection and Response (EDR) and Network Detection and Response (NDR).
• Experience with a Security Orchestration and Automated Response (SOAR) platform.
• Desirable knowledge of Australian Government information security policies, ASD Information Security Manual and Essential Eight.

Responsibilities

• Perform threat-driven analysis of system security.
• Analyse threat intelligence for system-specific threats.
• Monitor security events for potential incidents.
• Develop incident response plans and playbooks.
• Review and improve security controls and vulnerabilities.
• Develop procedures to monitor and analyse security information and events.
• Support test and evaluation activities for deliverables.
• Assist Technical Leadership as required.

Skills

SOC experience

Splunk ES

EDR

NDR

SOAR

Education

Bachelor's degree in a related field

Tools

Splunk Enterprise Security

SOAR platform

Job description

Remote Pty is seeking a Lead Cyber Security Threat Analyst in Canberra to drive threat-driven reviews of system security. You will analyse threat intelligence, monitor events for incidents, and develop incident response playbooks to strengthen defenses across deliverables.

You will work with the leadership team to assess vulnerabilities, review controls, and implement monitoring procedures. Strong collaboration across a defence and government-focused environment is expected.