Lead Security Analyst – Cyber Threat Analyst

The HR Ally; Canberra; On-site; AUD 150,000 - 190,000; Full time

Job summary

The HR Ally is seeking a Lead Security Analyst – Cyber Threat Analyst for a 12-month contract in ACT & SA. The role focuses on threat-driven analysis, vulnerability assessment, and incident monitoring with close collaboration to security leadership.

Responsibilities include developing incident response plans, reviewing security controls, and supporting test and evaluation activities for deliverable systems. POSITIVE Vetting (TSPV) clearance may be required.

Qualifications

• Hands-on threat and vulnerability analysis experience.
• Ability to monitor security events and develop incident playbooks.
• Experience with Splunk ES and EDR/NDR platforms.

Responsibilities

• Assess and strengthen security posture through threat-driven analysis.
• Monitor events and incidents; develop response procedures.
• Collaborate with technical teams and security leadership.

Skills

Threat analysis

Incident response

Security monitoring

Vulnerability assessment

Policy knowledge

Tools

Splunk Enterprise Security

EDR

NDR platform

SOAR platform

Job description

Lead Security Analyst – Cyber Threat Analyst

Role: Lead Security Analyst – Cyber Threat Analyst
Job Type: Contract (12 months contract + extension)
Location: ACT & SA
Security clearance: Must be able to obtain Positive Vetting (TSPV required)

Role Overview

The Security Analyst will be responsible for assessing, monitoring, and strengthening the organization's security posture through threat-driven analysis, vulnerability assessment, incident monitoring, and the development of response procedures. Working closely with technical teams and security leadership, the role ensures that systems are protected against evolving threats and that effective security controls and response processes are in place.

Key Duties and Responsibilities

• Perform analysis of system security based on a threat-driven approach.
• Analyze threat intelligence for system specific threats.
• Monitor security events and information for security incidents.
• Develop and use incident response plans and playbooks.
• Analyze security vulnerabilities and propose solutions.
• Review current system security controls for vulnerabilities.
• Develop procedures to monitor and analyze security information and events.
• Support, plan and conduct test and evaluation activities for deliverable systems and products.
• Support the Technical Leadership team as required.
• Demonstrated experience working as a Security Analyst.
• Demonstrated experience in using Splunk Enterprise Security.
• Experience with Endpoint Detection and Response (EDR) and Network Detection and Response
• (NDR) platforms.
• Experience with a Network Detection and Response (NDR) platform.
• Experience with a Security Orchestration and Automated Response (SOAR) platform.
• Demonstrated experience with or knowledge of information security policies, the Information Security Manual and Essential Eight