Senior Cyber Threat Analyst / Threat Detection Engineer – Splunk
Location:Canberra / Interstate candidates considered – Hybrid or remote arrangements subject to approval
Hours:Up to 40 hours per week
Security Requirement:Must be able to obtain Baseline Security Clearance
About the Opportunity
Hatchit Studios is seeking an experiencedSenior Cyber Threat Analyst / Threat Detection Engineerfor a long-term labour hire engagement within a Federal Government Security Operations Centre (SOC).
This is ahands-on threat detection engineering rolefocused on researching, developing, testing and maintaining detection use cases, rules and SIEM correlation logic across the SOC technology stack.
The environment primarily usesSplunk Cloud, with integrated SOAR capabilities, alongside Microsoft Sentinel for selected workloads and Microsoft Defender for Endpoint (MDE) for endpoint detection and response.
We are particularly interested in candidates with5+ years' experience working within a cyber security operations centre and/or directly in threat detection engineering.
Key Responsibilities
Develop threat detection use cases based on threat models, system risks, vulnerabilities, threat intelligence, incidents and industry frameworks
Develop and maintainSIEM correlation logic, detection rules and detection content
Develop detections acrossSIEM, SOAR and EDRtechnologies
Develop playbooks for alert validation and support incident response automation
Develop and maintain threat models using recognised methodologies such asSTRIDE, MITRE ATT&CK; and attack path analysis




Identify detection opportunities and monitoring coverage gaps
Research and analyse emerging threats to develop recent detection content
Assess emerging risks associated withAI platforms, services and agents
Develop detection content addressing AI-related misuse, data leakage, prompt injection, model abuse and adversarial activity
Maintain threat intelligence integrations across the SOC technology stack
Collaborate with Cyber Defence Analysts to test, tune and improve detection rules
Assist with incident response and onboarding new security data sources
Work with architecture and engineering teams to translate threat modelling outcomes into effective monitoring, detection and response capabilities
Skills & Experience Required
5+ years' experiencein cyber security operations, SOC environments and/or threat detection engineering
Strong hands-on experience developingSIEM detection rules, use cases and correlation logic
Demonstrated detection engineering experience acrossat least two enterprise SIEM platforms, such as Splunk, Microsoft Sentinel, QRadar or Elastic
StrongSplunkexperience is highly regarded given the target environment
Experience developing and implementing detections acrossSIEM, SOAR and EDR platforms




Experience with incident response automation and security playbook development
Practical threat modelling experience usingSTRIDE, PASTA, MITRE ATT&CKor; similar methodologies
Strong understanding of thecyber threat intelligence lifecycle
Experience identifying and developing monitoring controls forAI-related security risks, ideally involving Microsoft Copilot, Azure AI or similar enterprise AI platforms
Strong communication, organisational and stakeholder engagement skills
Highly Desirable
Experience withSplunk Cloud
Experience withMicrosoft Sentinel
Experience withMicrosoft Defender for Endpoint (MDE)
Experience developing or usingSigma detection rulesand translating detections between security platforms
Familiarity with AI security frameworks and guidance includingASD/ACSC, NIST, MITRE ATLAS and OWASP LLM Top 10
Experience with enterprise EDR technologies such as CrowdStrike or Carbon Black
Python and/or Bashscripting experience supporting detection engineering and security automation
Relevant cyber security certifications such asGIAC, SANS, CISSP, GCIA, GCIH or equivalent
Why Apply?
Initial12-month contract with up to 24 months of extensions
Work within an establishedSecurity Operations Centre
Hands-on exposure toSplunk Cloud, Microsoft Sentinel and Microsoft Defender for Endpoint
Work on contemporary detection engineering, threat intelligence andAI security challenges
Hybrid working arrangements with interstate/remote candidates considered
#J-*****-Ljbffr

📌 Senior Threat Detection Engineer – Splunk / Sentinel / Mde (Canberra)
🏢 Hatchit Studios
📍 Canberra