One of our leading federal govt clients is seeking to engage Lead Cyber Threat Analyst- Canberra

Please note Candidates must have a NV1 security clearance

Initial contract duration-12 months

Extension term-24 months

Experience level-Manager - EL1 equivalent

Location of work-Canberra-Hybrid

Mandatory Skills

Key Responsibilities

- Lead proactive threat hunting, intrusion investigations and incident response.
- Investigate suspicious activity, malicious domains, network traffic and endpoint threats.
- Develop threat models, hunt hypotheses and actionable intelligence reports.
- Analyse vulnerabilities, security risks and recommend remediation.
- Develop detection rules, automated playbooks and security workflows.
- Collaborate with cyber teams, engage stakeholders and mentor junior staff.

Essential Technical Skills

- Microsoft Defender XDR: Advanced Hunting using KQL, investigation of endpoint, network and email events.
- Elastic / Kibana: Log analysis using KQL, Lucene or ES|QL.
- ExtraHop: Network traffic analysis and malicious IP/domain investigations.
- Linux: Log investigation, Windows event logs and firewall logs.
- Threat Intelligence: DNS investigations, threat indicators and adversary TTP analysis.
- Solid experience in SIEM/EDR, incident response, digital forensics and cyber threat hunting.
- Understanding of PSPF, ISM, Essential Eight and NIST.

Highly Desirable

- Microsoft Sentinel, QRadar, SOAR, Rapid7, Tenable.




- Malware analysis and reverse engineering tools (FlareVM, HxD, PEStudio, Sysinternals).
- Python/PowerShell scripting and security automation.
- Azure, AWS, GCP, Active Directory, Entra ID and IAM.
- Experience integrating security tools and developing automated detection/response playbooks.
- CREST certifications or relevant cyber security qualifications.

Candidate Requirements

- Proven experience leading complex threat investigations and communicating findings to technical and executive stakeholders.
- Strong analytical, documentation, stakeholder management and mentoring skills.
- Experience delivering outcomes in complex, high-pressure environments.
- Background in government cyber security operations highly regarded.
- Specialisations: Senior Cyber Threat Hunter, Senior Malware Analyst or Senior AI Engineer.
- Submission Requirement: One-page pitch addressing all essential and relevant desirable criteria (maximum 5,000 characters).
- Recruitment Priority: Focus on genuinely hands-on threat hunters and incident responders with strong Microsoft Defender, KQL, Elastic and network investigation experience. Prioritise candidates who can demonstrate actual investigations, tools used and outcomes achieved.

If you would like to apply for the above role, then please send your updated resume with Cover Letter to [email protected]

📌 Lead Cyber Threat AnalystLevel-Canberra
🏢 IT Alliance Australia
📍 Canberra