Senior Cyber Threat Analyst — SIEM & AI Security

Velan Consulting Pty Ltd; Canberra; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

Velan Consulting Pty Ltd is seeking a Senior Cyber Threat Analyst to join the CIO Division in Canberra on a hybrid basis. You will develop use cases, write detection rules, and maintain threat intelligence across SOC tooling.

This role requires strong experience in SIEM/EDR, threat modelling, and AI security monitoring within a large government context. Applicants should have five or more years in cyber security operations, experience with enterprise SIEM platforms, and the ability to translate

Qualifications

• Experience in building detection content across SIEM/EDR/SOAR environments.
• Ability to translate threat models into monitoring requirements and detections.
• Familiarity with industry frameworks (STRIDE, ATT&CK) and intelligence lifecycle.

Responsibilities

• Develop detection content based on threat models, risks, and incidents.
• Create detection rules for SIEM/EDR platforms and validate alerts.
• Collaborate with architecture teams to translate threat modelling into monitoring capabilities.
• Maintain threat intelligence integrations across SOC tools and data sources.
• Conduct in-depth research for new detection content and tune detections with Cyber Defence Analysts.
• Support incident response and onboarding of new data sources for use cases.

Skills

Threat detection

Threat modelling

STRIDE/ATT&CK

AI security monitoring

SIEM/EDR/SOAR

Sigma rule development

Automation scripting

Threat intelligence lifecycle

AI platform monitoring

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

CrowdStrike

Defender for Endpoint

Job description

Velan Consulting Pty Ltd is seeking a Senior Cyber Threat Analyst to join the CIO Division in Canberra on a hybrid basis. You will develop use cases, write detection rules, and maintain threat intelligence across SOC tooling.

This role requires strong experience in SIEM/EDR, threat modelling, and AI security monitoring within a large government context. Applicants should have five or more years in cyber security operations, experience with enterprise SIEM platforms, and the ability to translate