Senior Cyber Threat Hunt & Emulation Specialist

Whizdom; Canberra; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Permanent employment

Exposure to advanced cyber operations

Career development opportunities

Collaborative team environment

Job summary

Whizdom seeks a Senior Cyber Threat Hunt & Emulation Specialist to lead investigations and elevate detection across SIEM/EDR within a mature SOC in Canberra. You will mentor analysts, run threat hunting, and drive cyber emulation to test controls and response effectiveness.

You will bring deep expertise in threat detection, incident response, and threat intelligence with strong Windows/Linux knowledge and automation skills.

Qualifications

• Bachelor's degree in Cyber Security, IT, CS or related discipline and/or relevant certifications.
• Significant SOC experience with threat hunting and incident response.
• Experience developing detection content and use cases; MITRE ATT&CK knowledge.
• Strong Windows/Linux, network protocol understanding; scripting/automation in Python or PowerShell.

Responsibilities

• Lead investigations and response activities for high-severity cyber incidents.
• Senior escalation point for SOC analysts; provide expert guidance.
• Develop and tune detection content, rules, and monitoring capabilities.
• Conduct proactive threat hunting and cyber emulation to test controls.
• Mentor junior analysts and enhance incident response playbooks.

Skills

Threat Detection

Incident Response

Threat Hunting

Digital Forensics

Security Monitoring

MITRE ATT&CK

Windows OS

Linux OS

Scripting / Automation

PowerShell

Python

Networking fundamentals

Education

Bachelor's degree in Cyber Security or related field

Industry certifications

Tools

SIEM

EDR

Job description

Senior Cyber Threat Hunt & Emulation Specialist

Permanent Opportunity

Location: Canberra, ACT

Work Environment: Full-Time Onsite

Security Requirements: Hold a current Positive Vetting (PV) Security Clearance.

Application Close: Friday, 11/09/2026

About the Organisation

Our client is a leading organisation operating within a highly secure and technology-driven environment. They are committed to protecting critical systems and infrastructure through advanced cyber security capabilities and continuous innovation.

This is a unique opportunity to join a highly skilled Security Operations team and play a key role in strengthening cyber resilience through proactive threat hunting, incident response, and cyber defence operations.

About the Role

As the Senior Cyber Threat Hunt and Emulation Specialist, you will provide technical leadership across security monitoring, threat detection, threat hunting, cyber emulation activities, and incident response operations.

Working within a mature Security Operations Centre (SOC), you will lead investigations into complex cyber incidents, enhance detection capabilities, mentor analysts, and contribute to the ongoing development of cyber security processes and capabilities.

Major Responsibilities

• Lead investigations and response activities for high-severity and complex cyber security incidents.
• Act as the senior escalation point for SOC analysts, providing expert technical guidance and support.
• Develop, tune and optimise detection use cases, correlation rules, and security monitoring capabilities across SIEM and EDR platforms.
• Conduct proactive threat hunting activities to identify previously undetected threats and adversary behaviours.
• Perform threat emulation activities to assess security controls and detection effectiveness.
• Analyse cyber threat intelligence and integrate insights into detection and response strategies.
• Drive continuous improvement of incident response processes, playbooks and operational procedures.
• Mentor and support junior analysts to strengthen overall team capability and performance.

Desired Skills and Experience

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related discipline and/or relevant industry certifications.
• Significant experience within Security Operations Centre (SOC) environments.
• Strong expertise in:
  • Threat Detection
  • Incident Response
  • Threat Hunting
  • Digital Forensics
  • Security Monitoring
• Demonstrated experience developing detection content, correlation rules and security use cases.
• Strong understanding of attacker tactics, techniques and procedures, including frameworks such as MITRE ATT&CK.
• Experience analysing and integrating threat intelligence into operational security functions.
• Strong understanding of Windows and Linux operating systems and network protocols.
• Scripting or automation experience using technologies such as Python or PowerShell.
• Knowledge of cyber security frameworks and standards including NIST and ISO 27001.
• Excellent analytical, problem-solving and stakeholder engagement skills.
• Demonstrated ability to mentor and develop cyber security professionals.

What's on Offer

• Permanent employment opportunity.
• Work alongside highly skilled cyber security professionals.
• Exposure to advanced cyber operations and emerging technologies.
• Ongoing professional development and career growth opportunities.
• Collaborative and mission-focused team environment.
• Competitive remuneration package.

Why Partner with Whizdom?

We're Whizdom. We view you as an extension of our strong, dependable brand and have differentiators which really are different.

The Whizdom way:

• We pay our contractors the same day you submit your timesheet.
• We are Level 3 DISP certified and committed to supporting Australia's security community.
• We are ISO 9001 certified and recognised for our commitment to quality and compliance.
• We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, veterans, and people living with disability.