State Government Contract

Melbourne CBD based | Hybrid

Dayrate $850 to $900

Your new company:

A leading Victorian State Government agency is seeking an experienced Senior Security Analyst to join its Information Security Services Branch. This organisation plays a critical role in safeguarding one of the largest technology environments in the state. You will join a collaborative, forward‑thinking team driving security uplift, digital transformation, and operational resilience across a complex and high‑profile environment.

Your recent role:

- Lead the detection, triage, containment, recovery, and resolution of cyber security incidents, managing assigned incidents end-to-end in accordance with the department's Cyber Security Incident Response Plan (CSIRP).
- Conduct Level 2 and Level 3 incident investigations using SIEM platforms (Microsoft Sentinel and/or Splunk), Microsoft Defender, EDR tools, and proactive threat-hunting methodologies.
- Perform daily SOC operations, including security monitoring, alert triage, investigation, escalation, and threat hunting across Microsoft Sentinel and Microsoft Defender environments.
- Analyse threat intelligence and correlate events across multiple security platforms to identify malicious activity, emerging threats, vulnerabilities, and potential business impacts.
- Design, implement, and continuously enhance detection engineering capabilities, including log management, custom analytics rules, threat modelling, MITRE ATT&CK; mapping, workbooks, playbooks, automation workflows, and use cases within Microsoft Sentinel.
- Develop and maintain situation reports, post-incident reviews, root cause analysis (RCA) reports, executive briefings,



and actionable security insights for senior stakeholders.
- Contribute to the continuous improvement of SOC operating procedures, playbooks, incident response processes, and cyber security governance frameworks.
- Support and provide expert advice on Microsoft security platforms, including Microsoft Sentinel and Microsoft Defender, as well as other security technologies such as Google Security, Tenable, and ServiceNow.
- Collaborate closely with internal ICT teams, school technical teams, external service providers, and Victorian Government cyber security agencies to strengthen the organisation's security posture.
- Produce operational security metrics, SOC performance reporting, and executive-level cyber security insights to support decision-making and risk management.

What you'll need to succeed:

- Demonstrated experience leading cyber security incident response activities, including CSIRT responsibilities, crisis management, incident coordination, containment, recovery, and post-incident review.
- Proven experience operating within a Security Operations Centre (SOC) environment, including daily monitoring, alert investigation, escalation management, and proactive threat hunting.
- Strong expertise with Microsoft security technologies, particularly Microsoft Sentinel and Microsoft Defender,



including advanced knowledge of Kusto Query Language (KQL).
- Hands-on experience in detection engineering, including log management, analytics rule development and tuning, workbook and playbook creation, automation, and security use case development.
- Strong skills in threat intelligence analysis, threat hunting, detection engineering, and SIEM/EDR platforms.
- Sound knowledge of security frameworks and methodologies including NIST Cybersecurity Framework (CSF), Incident Response Frameworks, MITRE ATT&CK;, and the ASD Essential Eight.
- Experience in vulnerability management, risk identification, and providing technical and strategic cyber security advice to both technical and non-technical stakeholders.
- Excellent investigation, documentation, and report-writing skills, including preparation of Root Cause Analysis (RCA) reports, incident summaries, and executive briefings.
- Relevant tertiary qualifications in Cyber Security, Information Technology, or a related discipline, complemented by industry-recognised cyber security certifications.

What you'll get in return:

- Work with a team that values innovation, collaboration and excellence
- Excellent environment with focus on work-life balance
- Enjoy the diverse and inclusive workplace

What you need to do now: Speak to our Experts in Technology for a confidential discussion or send through your updated resume for immediate consideration.

Hays appreciates the importance of workforce diversity and inclusion. We are an equal-opportunities employer and have policies, procedures and relationships in place to promote our understanding of all forms of diversity.

📌 Senior Security Analyst (Melbourne)
🏢 Hays
📍 Melbourne