CTIR - Cyber Threat Response Analyst (Adversary Operations)

The Opportunity

Join a diverse, global Cyber Threat and Incident Response team within the Cyber Security function of a global financial services organisation's Technology division. This role is based in Sydney within the Cyber Threat Defense team.

What You’ll Do

- Perform hypothesis-driven threat hunting, combining behavioral threat intelligence, controls-based research, and defensive cyber expertise to improve overall cybersecurity posture
- Conduct proactive, intelligence-driven threat hunting across a global environment using attacker TTPs, behavioral analytics, and large-scale telemetry (EDR, SIEM, TIP)
- Perform threat modeling and execute structured, hypothesis-driven hunts to uncover previously undetected threats
- Identify detective and preventative control gaps and translate findings into actionable improvements
- Collaborate closely with Security Operations and Detection Engineering teams




- Apply frameworks such as MITRE ATT&CK; and MITRE ATLAS operationally, while maintaining a continuous learning mindset around adversarial techniques and AI-driven tooling

What You’ll Bring

- Experience in aggregate log analysis (Splunk, Google SecOps, or similar) and with an Endpoint Detection and Response platform
- Ability to translate technical findings into actionable insights and communicate clearly with both technical and non-technical stakeholders
- Offensive security/adversarial mindset with robust knowledge of threat actor TTPs
- Experience threat hunting in enterprise infrastructure, including Windows/Linux systems, Active Directory, cloud platforms, and identity systems
- Minimum 4 years' related security or technology experience in enterprise environments, with a focus on threat hunting, security operations, or penetration testing

#J-18808-Ljbffr

📌 CTIR - Cyber Threat Response Analyst (Adversary Operations) (New South Wales)
🏢 Lanson Partners
📍 New South Wales