Principal Cyber Security Analyst

Decipher Bureau; Brisbane; Presencial; AUD 125.000 - 178.000; Jornada completa

Descripción de la vacante

Decipher Bureau in Brisbane is seeking a Principal Cyber Security Analyst to take a senior, hands-on role in investigation, management and response to cyber incidents, with a focus on DFIR.

You will coordinate response activities, develop playbooks, mentor Level 1–2 analysts and leverage Microsoft security technologies to strengthen incident detection and response.

This 6–12 month contract offers Brisbane CBD location and opportunities to lead complex DFIR programs within a large organisation.

Formación

• Significant SOC experience at a senior level.
• Hands-on DFIR capabilities.
• Experience in managing complex cyber incidents including containment and remediation.
• Strong knowledge of Microsoft security stack (Sentinel/Defender/Defender XDR).
• Experience mentoring junior security analysts.
• Experience in large enterprise environments is advantageous.

Responsabilidades

• Lead and undertake complex cyber security incident investigations, including digital forensics, incident analysis, containment and remediation.
• Coordinate incident response activities to ensure incidents are investigated, escalated and resolved.
• Develop and continuously improve technical incident response playbooks, procedures and documentation.
• Leverage Microsoft security technologies to investigate threats and support incident response.
• Act as a senior escalation point for complex incidents and investigations.
• Provide mentoring and technical guidance to Level 1–2 analysts.

Conocimientos

Senior SOC Analyst

DFIR

Incident response

Threat detection

Mentoring

Malware analysis

Herramientas

Microsoft Sentinel

Microsoft Defender

Defender XDR

Descripción del empleo

Our client is a large organisation operating within a complex technology environment, with a strong focus on strengthening its cyber security capabilities and protecting critical services and information. As part of its ongoing investment in cyber security operations, the organisation is seeking an experienced Principal Cyber Security Analyst to join its established cyber security team. This is an opportunity for a technically capable security professional to play a key role in incident response, digital forensics and the continuous improvement of operational cyber security capabilities.

The Role

As a Principal Cyber Security Analyst, you'll take a senior, hands‑on role in the investigation, management and response to cyber security incidents. With a strong focus on Digital Forensics and Incident Response (DFIR), you'll be responsible for investigating complex security events, coordinating response activities and developing technical playbooks to strengthen incident response capability.

Key Responsibilities

• Lead and undertake complex cyber security incident investigations, including digital forensics, incident analysis, containment and remediation.
• Manage and coordinate incident response activities, ensuring security incidents are effectively investigated, escalated and resolved.
• Develop, maintain and continuously improve technical incident response playbooks, procedures and operational documentation.
• Leverage Microsoft security technologies to investigate threats, analyse security events and support incident response activities.
• Act as a senior technical escalation point for complex security incidents and investigations.
• Provide technical guidance, coaching and mentoring to Level 1 and Level 2 security analysts.
• Support the continuous improvement of security operations, incident response processes and technical capabilities.
• Analyse Indicators of Compromise (IOCs), attacker behaviours and relevant threat intelligence to support investigations.
• Identify opportunities to improve incident detection, investigation workflows and response effectiveness.
• Document investigation findings, response activities, recommendations and lessons learned.
• Collaborate with internal technical teams and relevant stakeholders to coordinate incident management and strengthen the organisation's security posture.

What You'll Bring

• Significant experience within a Security Operations Centre (SOC), ideally operating at a Senior SOC Analyst, L2/L3 Analyst or Security Operations Lead level.
• Demonstrated hands‑on experience in Digital Forensics and Incident Response (DFIR).
• Strong experience investigating, managing and responding to complex cyber security incidents, including containment, remediation and recovery.
• Strong working knowledge of the Microsoft security ecosystem, ideally including Microsoft Sentinel, Microsoft Defender and Defender XDR.
• Experience developing, implementing and maintaining technical incident response playbooks, runbooks and operational procedures.
• Ability to independently investigate and manage security incidents, acting as a technical escalation point for the wider team.
• Demonstrated experience mentoring, coaching or providing technical guidance to other security analysts.
• Strong understanding of threat detection, threat intelligence, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).
• Experience identifying opportunities to improve security operations processes, incident response capability and operational maturity.
• Strong analytical and problem‑solving skills, with the ability to investigate complex technical issues and determine appropriate response actions.
• Excellent communication and stakeholder engagement skills, with the ability to clearly articulate technical findings and recommendations.
• Experience working within large, complex enterprise environments will be highly regarded.

What's in It for You?

• Competitive contract rate of $110 per hour + superannuation.
• Initial 6- 12 month contract opportunity.
• Brisbane CBD location, conveniently based on Ann Street.
• Opportunity to take ownership of complex DFIR and incident response activities.
• Play a key role in developing technical playbooks and improving incident response capability.
• Work with Microsoft security technologies within an established cyber security environment.
• Opportunity to provide technical leadership and mentor other security professionals.
• Make a genuine contribution to strengthening the cyber security posture of a large organisation.