About the role Talenza has partnered with the Cyber Defence Centre on their search for a Principal Cyber Security Analyst to join the Cyber Security Unit (CSU) in Brisbane.

You'll play a critical role in protecting Queensland's government and community from cyber harm - working alongside skilled analysts, engaging with agencies and vendors, and helping shape the future of the Government cyber defence capability.

You will:

Take ownership of Whole of Government SOC service delivery, spanning SIEM, External Attack Surface Management, and Vulnerability Management platforms

Serve as the go-to technical expert when serious or complex security incidents strike

Guide incidents from first alert through to full resolution, covering detection, containment, eradication, recovery, and lessons-learned reviews

Dig into suspected intrusions using forensic analysis, malware reverse engineering, and root cause investigation

Fine-tune and build out detection logic to sharpen threat catching and cut down on noise from false alerts

Push the SOC's operational maturity forward and put solid Standard Operating Procedures in place

Turn data trends and metrics into practical recommendations for strategic improvement

Coach and grow the skills of SOC analysts across the team

Formulate threat hunting theories and help track down threat actor activity government-wide

This role involves participation in a set roster/shift work, including on-call duties

Willingness to undertake and maintain a Baseline/NV1 National Security Clearance

About you and what we are looking for:



You're an experienced SOC professional with strong technical credibility and a track record of leading incident response and uplifting operational maturity.

Proven experience working in or supporting a Security Operations Centre (SOC)

Strong hands-on experience with Microsoft Sentinel, including KQL, Analytic Rules, Workbooks, Playbooks, and Microsoft Defender XDR

Solid understanding of SOC workflows - threat intel sharing, vulnerability management, incident response and investigation

Proficiency with frameworks such as NIST, MITRE ATT&CK;, and D3FEND

Demonstrated ability to build SOPs and streamline SOC processes

Highly desirable:

Ability to construct use cases and SIEM playbooks

Scripting/programming skills (Python or PowerShell)

Familiarity with forensic tools such as Autopsy, Wireshark, or SANS SIFT

Experience across Linux/Unix and Windows environments

Familiarity with the ASD Information Security Manual, Protective Security Policy Framework, NIST SP800-61r3, ISO27000 series, and Information Standard 18

Postgraduate qualifications in ICT, Information Systems, or Cyber Security

Relevant qualified cybersecurity certifications

Microsoft Sentinel (KQL, Analytic Rules, Workbooks, Playbooks) & Microsoft Defender XDR

SIEM, EASM, and Vulnerability Management operations

Digital forensics, malware analysis, and root cause investigation

MITRE ATT&CK;, D3FEND, and NIST frameworks

Python or PowerShell scripting

SOC incident response leadership and SOP development

Threat hunting, threat intelligence, and stakeholder engagement

#J-18808-Ljbffr

📌 Principal Cyber Security Analyst (Brisbane)
🏢 Talenza
📍 Brisbane