Senior Threat Detection Engineer (Hybrid)

Everi Pty; Canberra; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Everi Pty in Canberra is seeking a Senior Cyber Threat Analyst to join a Commonwealth Government cyber defence function. You will develop and maintain detection content across SIEM, SOAR and EDR platforms, translating threat intelligence into monitoring and response capabilities in an Agile/ITIL environment.

The role covers building detection use cases, writing rules, creating playbooks, modelling threats with STRIDE, MITRE ATT&CK, and supporting incident response and threat intel integrations.

Qualifications

• Five years' experience in cyber security operations.
• Experience developing detection content across SIEM, SOAR and EDR platforms.
• Practical threat-modelling experience using STRIDE, MITRE ATT&CK and related methodologies.

Responsibilities

• Develop detection use cases based on threat models, system risks, vulnerabilities, intelligence and incident reports.
• Develop and maintain detection-rule syntax across SIEM and EDR technologies.
• Create playbooks to support alert validation, incident response and security automation.
• Develop detection content using recognised methodologies such as STRIDE and MITRE ATT&CK.
• Collaborate with architecture and engineering teams to implement detection and response capabilities.

Skills

Threat detection engineering

Threat modelling

Threat intelligence lifecycle

Stakeholder engagement

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Elastic

Job description

Everi Pty in Canberra is seeking a Senior Cyber Threat Analyst to join a Commonwealth Government cyber defence function. You will develop and maintain detection content across SIEM, SOAR and EDR platforms, translating threat intelligence into monitoring and response capabilities in an Agile/ITIL environment.

The role covers building detection use cases, writing rules, creating playbooks, modelling threats with STRIDE, MITRE ATT&CK, and supporting incident response and threat intel integrations.