Threat Detection Engineer - Hybrid & AI Security

Canberra, Australian Capital Territory, Australia Department of Industry, Science and Resources; Canberra; Hybrid; AUD 110,000 - 150,000; Full time

Job summary

Department of Industry, Science and Resources is seeking a Senior Cyber Threat Analyst to lead threat detection and security operations within the CIO Division. The role focuses on developing detection content for SIEM/EDR platforms, threat modelling, and collaboration with architecture teams to strengthen monitoring and response capabilities.

The position requires Australian citizenship and the ability to obtain Baseline security clearance, with hybrid work arrangements in ACT and potential

Qualifications

• Senior - APS6 equivalent level experience in cyber security operations.
• Ability to obtain Baseline security clearance.

Responsibilities

• Develop use cases based on threat models and industry frameworks.
• Develop detection rule syntax for SIEM and EDR technologies.
• Create playbooks for alert validation and incident response workflows.
• Maintain threat models with STRIDE, ATT&CK, and related methodologies.
• Collaborate with architecture/engineering to translate threat modelling into monitoring and response.

Skills

Threat Detection

SIEM

EDR

Threat Modelling

Incident Response

Automation

Python

Bash

AI Security

Cloud Security

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

CrowdStrike

Microsoft Defender for Endpoint

Carbon Black

Job description

Department of Industry, Science and Resources is seeking a Senior Cyber Threat Analyst to lead threat detection and security operations within the CIO Division. The role focuses on developing detection content for SIEM/EDR platforms, threat modelling, and collaboration with architecture teams to strengthen monitoring and response capabilities.

The position requires Australian citizenship and the ability to obtain Baseline security clearance, with hybrid work arrangements in ACT and potential