Lead Cyber Threat Analyst – Security Operations

Rate Guide: $1,200–$1,300 per day plus GST

Location: Canberra, ACT or Adelaide, SA

Working Arrangements: Onsite

Contract: 12 months + 2 × 12-month extensions

Estimated Start: 30 November 2026

Security Clearance: Current TSPV mandatory

Babylon Data is seeking Lead Cyber Threat Analysts to support a highly secure Australian Government environment.

These lead-level roles will assess and strengthen system security using a threat-driven approach. You will analyse threat intelligence, monitor security events, investigate potential incidents, assess vulnerabilities and help develop effective security controls, procedures and incident response capabilities.

Key Responsibilities

- Perform threat-driven analysis of system security.
- Analyse threat intelligence to identify system-specific threats.
- Monitor security events and information for potential security incidents.
- Investigate and support the response to identified security incidents.
- Develop and maintain incident response plans and playbooks.
- Identify and analyse system security vulnerabilities.
- Recommend practical treatments and remediation activities.
- Review existing system security controls for vulnerabilities and weaknesses.
- Develop procedures for monitoring and analysing security information and events.
- Support the planning and delivery of test and evaluation activities for systems and products.
- Provide technical security advice and support to the Technical Leadership team.
- Work collaboratively with security leadership, technical teams and operational stakeholders.

Essential Requirements





Candidates must demonstrate

- Substantial experience working within a Security Operations Centre as a Security Analyst.
- Strong practical experience using Splunk Enterprise Security.
- Experience using Endpoint Detection and Response platforms.
- Experience using Network Detection and Response platforms.
- Experience using a Security Orchestration, Automation and Response platform.
- Experience analysing cyber threats, security events, incidents and vulnerabilities.
- The ability to develop security monitoring procedures, incident response plans and playbooks.
- Robust written communication and stakeholder engagement skills suitable for a lead-level role.

Desirable Experience

- Knowledge or practical experience applying Australian Government information security policies.
- Experience working with the ASD Information Security Manual.
- Understanding of the Essential Eight.
- Previous experience within Defence, intelligence, national security or another highly classified environment.
- Relevant cyber security, Splunk or incident response certifications.

Mandatory Conditions

- Candidates must be Australian citizens.
- Candidates must already hold a current Top Secret Positive Vetting security clearance.
- Candidates must be willing and able to work onsite in Canberra or Adelaide.
- Successful candidates must complete the organisation’s suitability assessment before commencing.
- Working arrangements and allocation to a specific work area will be determined according to operational requirements.
- Maximum engagement is 40 hours per week.

📌 Lead Cyber Threat Analyst – Security Operations (Canberra)
🏢 Babylon Data
📍 Canberra