Job Description
CTIR - Cyber Threat Response Analyst (Adversary Operations)
n
The Opportunity
n
Join a diverse, global Cyber Threat and Incident Response team within the Cyber Security function of a global financial services organisation's Technology division. This role is based in Sydney within the Cyber Threat Defense team.
n
What You'll Do
n
n
Perform hypothesis-driven threat hunting, combining behavioral threat intelligence, controls-based research, and defensive cyber expertise to improve overall cybersecurity posture
n
Conduct proactive, intelligence-driven threat hunting across a global setting using attacker TTPs, behavioral analytics, and large-scale telemetry (EDR, SIEM, TIP)
n
Perform threat modeling and execute structured, hypothesis-driven hunts to uncover previously undetected threats
n
Identify detective and preventative control gaps and translate findings into actionable improvements
n
Collaborate closely with Security Operations and Detection Engineering teams
n




Apply frameworks such as MITRE ATT&CK; and MITRE ATLAS operationally, while maintaining a continuous learning mindset around adversarial techniques and AI-driven tooling
n
n
What You'll Bring
n
n
Experience in aggregate log analysis (Splunk, Google SecOps, or similar) and with an Endpoint Detection and Response platform
n
Ability to translate technical findings into actionable insights and communicate clearly with both technical and non-technical stakeholders
n
Offensive security/adversarial mindset with strong knowledge of threat actor TTPs
n
Experience threat hunting in enterprise infrastructure, including Windows/Linux systems, Active Directory, cloud platforms, and identity systems
n
Minimum 4 years' related security or technology experience in enterprise environments, with a focus on threat hunting, security operations, or penetration testing
n

📌 Ctir - Cyber Threat Response Analyst (Adversary Operations) (New South Wales)
🏢 Lanson Partners
📍 New South Wales