About us:

Informatech is a leading ICT consultancy with close to 200 professionals specialising in Technical Services, Testing, Project Delivery, and Cyber Security. Since 2015, we've grown rapidly while earning national recognition and awards, and ranked on the AFR Fast 100 for a third consecutive year. 100% Australian-owned and DISP accredited, we back our people with real career stability, genuine development opportunities, and complex, high-impact work across Defence, National Security, and Federal Government.

Location: Canberra

Security clearance: Australian citizenship, and Baseline clearance minimum

Role overview:

We are supporting a major Federal Government department's Cyber Security team to strengthen detection engineering capability across their Security Operations Centre. You will be working across SIEM, SOAR and EDR platforms to build and maintain the detection content that protects the department's environment.

We are ideally seeking a permanent engagement, with a market-competitive salary on offer for the right candidate.

Key responsibilities:

- Developing use cases and detection rule syntax based on threat models, system risks, vulnerabilities and industry frameworks
- Developing playbooks for alert validation and threat models using STRIDE, ATT&CK; and attack path analysis
- Assessing emerging AI-related security risks utilising prompt injection, model abuse, data leakage,



adversarial activity, and developing detection content for them
- Maintaining threat intelligence integrations across the SOC technology stack
- Collaborating with Cyber Defence Analysts on detection rule tuning and content development
- Supporting incident response, exercises and time-sensitive operations as directed

To be successful, you will have extensive experience in:

- Developing detection content across enterprise SIEM platforms including Splunk, Microsoft Sentinel, QRadar, and Elastic
- Implementing detections across SIEM, SOAR and EDR platforms, including automation and playbook development
- Threat modelling and the cyber threat intelligence lifecycle
- Monitoring AI-related security risks in platforms such as Microsoft Copilot or Azure AI
- A minimum of five years in cyber security operations, with strong stakeholder engagement skills

Perks of the role:

- $5,000 annual professional development allowance for permanent staff
- Five additional days of paid training leave each year for permanent staff
- Diverse client exposure, providing opportunities to work across multiple sites and environments
- $500 annual health and wellbeing allowance to support your personal wellness

If you are interested, then we encourage you to apply! We will assess each and every application.

📌 Senior Cyber Threat Analyst (Australian Capital Territory)
🏢 Informatech
📍 Australian Capital Territory