Senior Cyber Threat Detection Engineer

IT Alliance; Canberra; Hybrid; AUD 120,000 - 150,000; Full time

Job summary

IT Alliance, on behalf of a leading federal government client, seeks a Senior Cyber Threat Analyst in Canberra. Hybrid work arrangement with baseline security clearance.

You will develop threat detection content across SIEM/EDR, perform threat modelling using STRIDE/ATT&CK, and coordinate with Cyber Defence Analysts to strengthen monitoring and response capabilities.

The role emphasizes threat intelligence sharing, automation, and contributing to incident response within ITIL/Agile environments.

Qualifications

• Experience developing detection content across at least two enterprise SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic).
• Proven ability to implement detections across SIEM, SOAR and EDR with incident response automation and playbooks.
• Practical threat modelling using recognised methodologies (e.g. STRIDE, ATT&CK) and translating outcomes into detection requirements.
• Experience monitoring AI-related security risks and platforms such as Microsoft Copilot or Azure AI.
• Minimum five years in cyber security operations with strong stakeholder engagement.

Responsibilities

• Develop use cases from threat models, system risks, and industry frameworks.
• Develop detection rule syntax for SIEM and EDR technologies.
• Create playbooks for alert validation with proper context.
• Maintain threat models using STRIDE, ATT&CK, and related methods.
• Assess AI-related threats and develop detection content for misuse and data leakage.
• Collaborate with architecture and engineering to translate threat modelling into monitoring and response.
• Maintain threat intelligence integrations across the SOC stack.
• Conduct in-depth research for new detection content and tuning.
• Assist incident response with guidance from the incident manager.
• Assist onboarding of new data sources to meet use-case requirements.
• Provide feedback to improve intelligence production and reporting.
• Support exercises and time-sensitive operations.

Skills

SIEM Expertise

Threat Detection

Threat Modelling

AI Security Monitoring

Cyber Ops Experience

Job description

IT Alliance, on behalf of a leading federal government client, seeks a Senior Cyber Threat Analyst in Canberra. Hybrid work arrangement with baseline security clearance.

You will develop threat detection content across SIEM/EDR, perform threat modelling using STRIDE/ATT&CK, and coordinate with Cyber Defence Analysts to strengthen monitoring and response capabilities.

The role emphasizes threat intelligence sharing, automation, and contributing to incident response within ITIL/Agile environments.