As the Principal Cyber Security Analyst, you will:

Act as the primary technical escalation point for SOC operations including complex or high-severity incidents, providing technical guidance and decision making support to the SOC team.
Create, tune and optimise detection rules, ensuring accurate threat identification and minimal false positives.
Lead and coordinate the end-to-end cyber incident response process, including detection, containment, eradication, recovery, and post-incident review to minimise risk exposure for Government entities.
Lead the proactive threat hunting function, identifying and mitigating advanced threats and implementing detections for emerging threats.
Evaluate, implement, and optimise SOC tools and technologies to enhance detection, response and threat hunting capabilities.
Lead initiatives to improve and mature SOC processes, ensuring alignment with industry best practices.




Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks to ensure operational consistency and efficiency.
Provide input into strategic planning for SOC operations, initiatives and resource allocation through analysing trends and metrics.
Provide mentorship, guidance and support to SOC analysts to enhance team capability fostering a culture of continuous learning and career development.
Contribute to the broader security community across whole of Government through presenting at security meet ups/forums, Communities of Practice, and other cross-organisational settings.
Perform on call duties as required.This work is licensed under a Creative Commons Attribution 3.0 Australia License.

📌 Principal Cyber Security Analyst Brisbane (Australia)
🏢 Queensland Government
📍 Australia