Security Analyst

Halcyon Knights; Brisbane; Hybrid; AUD 113,000 - 121,000; Full time

Benefits offered by this job

Free onsite parking

Job summary

Halcyon Knights is seeking a Security Analyst to join the Information Technology Branch on a 12-month contract with strong potential for extension. You will operate and mature the department's Security Operations Centre, monitor threats, and lead continual improvement in collaboration with an MSP to ensure robust incident response and governance.

The role requires hands-on expertise in SIEM, incident response, and proactive threat hunting, plus the ability to work across government security

Qualifications

• Proven experience managing external IT/Cyber Security MSPs.
• Deep technical expertise in SIEM management, use cases and log onboarding.
• Strong incident response capabilities using IOCs and TTP frameworks.
• Proactive threat hunting experience and continuous improvement mindset.
• Excellent collaboration with internal stakeholders and government security units.

Responsibilities

• MSP governance: oversight to MSP, ensure SLA and security alignment.
• SIEM optimization: uplift processes, onboarding and health checks.
• Detection & log engineering: close work with owners and MSP to close logging gaps.
• Incident response & analysis: investigate threats and enrich investigations.
• Proactive threat hunting: conduct and review hunting activities.
• Stakeholder collaboration: partner with internal teams and QGCSU.

Skills

MSP governance

SIEM management

Incident response

Threat hunting

Log onboarding

Job description

Security Analyst

• Rate: $82 to $88/hour (depending on skills and experience, plus superannuation)
• Duration: 12-month contract (with view to extend)
• Location: Carseldine, Brisbane (No fully remote options available)
• Work Arrangement: 50% Work from Home (WFH) flexibility
• Perks: Free onsite parking
• Position Type: Contract (includes a 1-in-6-week on-call rotation)

About the Role

Join a prominent QLD Government department within their Information Technology Branch as a Senior Security Analyst on an initial 12-month contract, with strong potential for further extensions. You will play a pivotal role in operating and maturing the department's Security Operations Centre. Working alongside a Managed Service Provider (MSP), you will monitor, identify, investigate, and respond to cyber security incidents, while leading continual improvement initiatives to ensure a fit-for-purpose SOC.

Key Responsibilities

• MSP Governance: Provide technical and governance oversight of the MSP, ensuring delivery aligns with contractual obligations, SLAs, security requirements, and government governance frameworks.
• SIEM Optimization: Review and uplift SIEM processes, including log source onboarding, health checks, and operational procedures.
• Detection & Log Engineering: Collaborate with system owners and the MSP to eliminate logging gaps and improve detection rules and use cases.
• Incident Response & Analysis: Investigate threats and enrich investigations using contextual data, Indicators of Compromise (IOCs), and attacker Tactics, Techniques, and Procedures (TTPs).
• Proactive Threat Hunting: Conduct and review targeted threat hunting activities in response to emerging cyber threats.
• Stakeholder Collaboration: Partner closely with internal teams and the Queensland Government Cyber Security Unit (QGCSU) for incident resolution and reporting.

About You

We are looking for a technical leader with a strong background in modern SOC operations and a knack for vendor governance. Your pay rate within the offered bracket will be determined based on the depth of your technical and governance expertise.

To be successful, your application should clearly demonstrate:

• Proven experience managing or providing oversight to external IT/Cyber Security Managed Service Providers (MSPs).
• Deep technical expertise in SIEM management, engineering use cases, and log onboarding.
• Strong incident response capabilities, utilizing IOCs and TTP frameworks to investigate complex threats.
• Proactive threat hunting experience and a continuous improvement mindset.
• Exceptional communication skills to collaborate with internal stakeholders and broader government security units (like QGCSU).

Requirements & Eligibility

• Location: Candidates must be local to the Brisbane area to support the partial onsite requirement (50% WFH). Fully remote applications will not be considered.
• On-Call: This role requires mandatory participation in an on-call roster (currently one week in six).
• Vetting: The successful candidate will be required to undergo a mandatory criminal history check prior to commencement.