An exciting prospect is available for experienced Lead Cyber Threat Analysts to join a major Federal Government cyber security team supporting critical systems and services.

This role will see you leading threat hunting, cyber investigations, incident response activities, and intelligence-led security operations within a complex enterprise environment.

Security Requirements Applicants must be Australian Citizens and able to obtain or hold an NV1 Security Clearance.

Key Responsibilities

- Lead proactive cyber threat hunting activities across enterprise environments.
- Investigate cyber security incidents, intrusions and suspicious activity.
- Conduct technical analysis of emerging threats, adversary behaviours, and attack patterns.
- Support and lead incident response activities, including containment, investigation and reporting.
- Develop threat intelligence products, threat models and risk assessments.
- Analyse vulnerabilities, identify security gaps and recommend remediation strategies.
- Collaborate with cyber operations, threat intelligence, engineering and security teams.
- Mentor team members and contribute to capability uplift initiatives.
- Produce high-quality reports and briefings for technical and non-technical stakeholders.

Essential Skills & Experience

- Extensive experience in Cyber Threat Hunting and Threat Analysis.
- Strong Incident Response and Cyber Investigation experience.




- Expertise with Microsoft Defender XDR and Advanced Hunting using KQL.
- Experience working with SIEM platforms such as Microsoft Sentinel, QRadar, or Elastic.
- Strong understanding of Threat Intelligence and Threat Modelling.
- Experience within large enterprise or government cyber security environments.
- Knowledge of PSPF, ISM, Essential Eight and NIST security frameworks.
- Excellent stakeholder engagement and communication skills.

Desirable Experience

- Malware Analysis and Reverse Engineering.
- Digital Forensics.
- Security Automation and SOAR platforms.
- Rapid7, Tenable or other vulnerability management solutions.
- Active Directory and Microsoft Entra ID.
- Azure, AWS or Google Cloud security.
- PowerShell and Python scripting.
- Identity and Access Management (IAM) technologies.

What’s on Offer

- Initial 12-month contract.
- Potential extensions up to 24 months.
- Hybrid working arrangements.
- Opportunity to work on high-impact cyber security initiatives.
- Exposure to advanced threat hunting, incident response and security technologies.

Application Deadline Applications close 13 October 2026, so early applications are encouraged.ply now or contact Tushar Musale for a confidential discussion.

Please include your updated CV, security clearance status, availability and daily rate expectations with your application.

📌 Lead Cyber security Analyst (Australian Capital Territory)
🏢 M&T Resources
📍 Australian Capital Territory