Senior Threat Intelligence & Hunting Lead

EY; Australia; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible work arrangements

Wellness incentive

Extended leave (8 weeks flex)

Job summary

EY is seeking a seasoned Cyber Threat Intelligence Lead to guide proactive CTI and threat hunting for a major client. You will oversee intel tools, craft actionable insights, and drive detection strategies across the SOC with collaboration across VM and security engineering teams.

Ideal candidates bring 7–10 years in SOC/CTI, deep CTI/Threat Hunting expertise, and hands-on experience with EDR/IDS-IPS/SOAR. You’ll work across EY Australia offices with flexible hours and a strong focus on

Qualifications

• 7–10 years’ experience in SOC or Cyber Threat intelligence roles with increasing responsibility.
• Hands‑on experience applying cyber threat intelligence including threat actor analysis and vulnerabilities.
• Experience with endpoint, network and security tooling (EDR/IDS-IPS/SOAR) and threat monitoring.
• Australian citizenship and NV1 security clearance, or eligibility to obtain one.

Responsibilities

• Act as the Cyber Threat Intelligence Lead within the SOC, managing intel tools and disseminating actionable intelligence.
• Collaborate with internal teams and external communities to improve threat intel processes.
• Provide CTI insights to enhance detection and response, monitoring threat feeds and actor activity.
• Lead proactive and reactive threat hunting in collaboration with the SOC team.
• Mentor SOC analysts and coordinate with security engineering to improve detections.

Skills

Cyber Threat Intelligence

Threat Hunting

MITRE ATT&CK

Threat intel tools

Threat intelligence tooling

Tools

Splunk

EDR

IDS/IPS

SOAR

Vulnerability management

Email security

Job description

EY is seeking a seasoned Cyber Threat Intelligence Lead to guide proactive CTI and threat hunting for a major client. You will oversee intel tools, craft actionable insights, and drive detection strategies across the SOC with collaboration across VM and security engineering teams.

Ideal candidates bring 7–10 years in SOC/CTI, deep CTI/Threat Hunting expertise, and hands-on experience with EDR/IDS-IPS/SOAR. You’ll work across EY Australia offices with flexible hours and a strong focus on