Cyber Threat Intelligence Engineer – 12-month contract

The role sits within the Cyber Security Operations Centre (CSOC), which is responsible for monitoring, detecting and responding to cyber security events and incidents across client environments.
This is a unique opportunity to shape an intelligence-led detection engineering capability in a critical national institution. The successful candidate will help connect technical cyber threat intelligence with real-world monitoring and response.

Who we are looking for
We are looking for a technically strong, analytical and outcomes-focused cyber security professional who can translate intelligence, incident findings and adversary tradecraft into practical detection and response improvements.
The ideal candidate will be comfortable working with ambiguity, prioritising competing operational demands, and producing clear, evidence-based advice for both technical and non-technical audiences.

The successful candidate will demonstrate:

- Identifying, assessing and prioritising security threats and vulnerabilities across infrastructure, applications and cloud environments, using industry-standard tools and providing risk-based remediation recommendations.
- Overseeing the end-to-end remediation of identified vulnerabilities, working with system and service owners, tracking progress, escalating risks and helping ensure timely closure.
- Coordinating the collection, analysis and dissemination of cyber threat intelligence, monitoring threat feeds,



advisories and emerging risks and assessing their relevance to the University's environment.
- Liaising with vendors and service providers to help meet contractual security requirements and address identified gaps.
- Helping drive continuous improvement of vulnerability management and threat intelligence processes, tooling and reporting, including automation and AI-enabled capabilities.
- Experience leading or contributing to detection engineering, detection lifecycle management, security monitoring or cyber security operations in a complex enterprise environment;
- the ability to convert cyber threat intelligence, adversary tactics, incident lessons, vulnerability information and threat hunting outcomes into practical detection logic, alerting, response guidance and measurable uplift;
- Ability to own EDR/XDR stack end to end
- robust technical knowledge of security telemetry, logging, SIEM, SOAR, endpoint detection and response, cloud security monitoring and cyber threat intelligence platforms;
- sound analytical and problem-solving skills, including the ability to assess detection effectiveness, reduce false positives, identify missed detection opportunities and provide evidence-based recommendations;

How to Apply
To be considered, please apply online with your CV and a cover letter outlining how your experience aligns with the selection criteria (above).
For more information, or to discuss your needs confidentially, reach out to Gary Kumar on ••••@bluefinresources.com.au

Applications Close
Applications will close on 18 August at 11 AM (AEST).

📌 Cyber Threat Intelligence Engineer (Brisbane)
🏢 Bluefin Resources Pty
📍 Brisbane