Job Description

CTIR - Cyber Threat Response Analyst (Adversary Operations)

n

The Prospect

n

Join a diverse, global Cyber Threat and Incident Response team within the Cyber Security function of a global financial services organisation's Technology division. This role is based in Sydney within the Cyber Threat Defense team.

n

What You'll Do

n

n
- Perform hypothesis-driven threat hunting, combining behavioral threat intelligence, controls-based research, and defensive cyber expertise to improve overall cybersecurity posture
n
- Conduct proactive, intelligence-driven threat hunting across a global environment using attacker TTPs, behavioral analytics, and large-scale telemetry (EDR, SIEM, TIP)
n
- Perform threat modeling and execute structured, hypothesis-driven hunts to uncover previously undetected threats
n
- Identify detective and preventative control gaps and translate findings into actionable improvements
n
- Collaborate closely with Security Operations and Detection Engineering teams
n




- Apply frameworks such as MITRE ATT&CK; and MITRE ATLAS operationally, while maintaining a continuous learning mindset around adversarial techniques and AI-driven tooling
n

n

What You'll Bring

n

n
- Experience in aggregate log analysis (Splunk, Google SecOps, or similar) and with an Endpoint Detection and Response platform
n
- Ability to translate technical findings into actionable insights and communicate clearly with both technical and non-technical stakeholders
n
- Offensive security/adversarial mindset with strong knowledge of threat actor TTPs
n
- Experience threat hunting in enterprise infrastructure, including Windows/Linux systems, Active Directory, cloud platforms, and identity systems
n
- Minimum 4 years' related security or technology experience in enterprise environments, with a focus on threat hunting, security operations, or penetration testing
n

📌 CTIR - Cyber Threat Response Analyst (Adversary Operations) (New South Wales)
🏢 Lanson Partners
📍 New South Wales