Principal Cyber Security Analyst

Department of Customer Services, Open Data and Small and Family Business; Brisbane; On-site; AUD 150,000 - 190,000; Full time

Job summary

The Queensland Government's Department of Customer Services, Open Data and Small and Family Business is seeking a Principal Cyber Security Analyst AO7 to lead the Cyber Defence team's SOC operations, oversee incident detection and threat intelligence, and coordinate responses to cyber incidents across government entities.

You will mentor SOC analysts, develop playbooks, and engage with stakeholders to mature whole-of-government cyber defence capabilities.

Qualifications

• No formal education requirements stated in the ad.

Responsibilities

• Act as the primary technical escalation point for SOC operations, guiding high-severity incidents.
• Create, tune and optimise detection rules to minimise false positives.
• Lead end-to-end cyber incident response and post-incident reviews.
• Lead proactive threat hunting to identify and mitigate advanced threats.
• Evaluate and optimise SOC tools and technologies for better detection.
• Develop SOPs and incident playbooks for consistent operations.
• Mentor SOC analysts and contribute to strategic planning.
• Present at security meetups and cross-organisational forums.
• Perform on-call duties as required.

Skills

Incident response

Threat hunting

Threat intelligence

SOC leadership

SOPs

Tools

SIEM

Job description

Principal Cyber Security Analyst AO7 The Cyber Defence team within the Department of Customer Services, Open Data and Small and Family Business’s Queensland Government Cyber Security Unit (QGCSU) help Queensland Government entities better prevent, prepare for, respond to, and recover from, cyber incidents through a centrally led program. As a key member of the team, you will be required to provide technical leadership, develop and deliver services and work closely with staff and key stakeholders to deliver a broad range of security services such as incident detection, response, threat intelligence and analytics and threat hunting to improve Whole of Government (WofG) cyber defence capabilities.

As The Principal Cyber Security Analyst, You Will

• Act as the primary technical escalation point for SOC operations including complex or high-severity incidents, providing technical guidance and decision making support to the SOC team.
• Create, tune and optimise detection rules, ensuring accurate threat identification and minimal false positives.
• Lead and coordinate the end-to-end cyber incident response process, including detection, containment, eradication, recovery, and post-incident review to minimise risk exposure for Government entities.
• Lead the proactive threat hunting function, identifying and mitigating advanced threats and implementing detections for emerging threats.
• Evaluate, implement, and optimise SOC tools and technologies to enhance detection, response and threat hunting capabilities.
• Lead initiatives to improve and mature SOC processes, ensuring alignment with industry best practices.
• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks to ensure operational consistency and efficiency.
• Provide input into strategic planning for SOC operations, initiatives and resource allocation through analysing trends and metrics.
• Provide mentorship, guidance and support to SOC analysts to enhance team capability fostering a culture of continuous learning and professional development.
• Contribute to the broader security community across whole of Government through presenting at security meet ups/forums, Communities of Practice, and other cross-organisational environments.
• Perform on call duties as required.

Occupational group

IT & Telecommunications