Threat Hunting Lead: Build & Own New Intelligence Program

Decipher Bureau; Melbourne; On-site; AUD 120,000 - 160,000; Full time

Job summary

Decipher Bureau is building a brand-new Threat Intelligence and Threat Hunting capability within its Cyber Defence team in Melbourne. You will be the hands-on technical lead, owning the design and delivery of hunting, intel, and automation initiatives across IT, OT and cloud environments.

The role focuses on hypothesis-led hunts, threat actor context, and scalable detections. You will work with senior stakeholders and external intel partners in a genuinely collaborative, tool-agnostic team.

Qualifications

• 4+ years in threat hunting, cyber threat intelligence, DFIR or related field.
• Hands-on hunting with endpoint, network, cloud and identity telemetry.
• Strong knowledge of forensic artefacts, adversary TTPs and hunt methodology.
• Experience with SIEM, EDR/XDR and threat intelligence platforms.
• Working knowledge of MITRE ATT&CK, Cyber Kill Chain and Diamond Model.
• Clear communication with technical and non-technical audiences.

Responsibilities

• Lead the build and continual improvement of threat hunting and threat intelligence capability.
• Plan and run hypothesis-led threat hunts and IoC sweeps.
• Translate hunts into automated detections, playbooks and use cases mapped to MITRE ATT&CK.
• Centralise threat intelligence sources for security monitoring and incident response.
• Support incident response with threat actor context and technical analysis.
• Produce threat intel reporting and briefings for technical teams and stakeholders.
• Build relationships with external intel providers, peers, and government.

Skills

Threat hunting

Threat intelligence

DFIR

SIEM

EDR/XDR

MITRE ATT&CK

Communication

Tools

SIEM

EDR/XDR

Threat intel tools

Job description

Decipher Bureau is building a brand-new Threat Intelligence and Threat Hunting capability within its Cyber Defence team in Melbourne. You will be the hands-on technical lead, owning the design and delivery of hunting, intel, and automation initiatives across IT, OT and cloud environments.

The role focuses on hypothesis-led hunts, threat actor context, and scalable detections. You will work with senior stakeholders and external intel partners in a genuinely collaborative, tool-agnostic team.