This is a rare chance to join a specialist threat intelligence team inside a large, nationally recognised Australian organisation with millions of customers and a complex, national scale environment.

The team's job is to understand which threats matter most to the organisation, track them closely and make sure the intelligence drives real decisions. The role is based in Canberra, where the team is growing, and part of it is building intelligence sharing relationships with security researchers and government agencies.

This is a genuine threat intelligence role, not a SOC analyst seat with a CTI title. Intelligence is the core of the job.

What the role covers:

- Threat actor tracking: researching the TTPs, tooling, infrastructure and targeting of the actors most relevant to the organisation
- Intelligence products: producing strategic, operational and tactical intelligence that enables threat informed decisions
- Briefing: delivering regular threat landscape briefings to technical teams and senior leadership
- Intelligence into action: working with detection, hunting and response teams to turn intelligence into detections, blocks and posture changes
- Partnerships: sharing intelligence with researchers and government agencies, and supporting incident response with actor insight

This is a rare chance to join a specialist threat intelligence team inside a large, nationally recognised Australian organisation with millions of customers and a complex, national scale workplace.

The team's job is to understand which threats matter most to the organisation, track them closely and make sure the intelligence drives real decisions. The role is based in Canberra, where the team is growing,



and part of it is building intelligence sharing relationships with security researchers and government agencies.

This is a genuine threat intelligence role, not a SOC analyst seat with a CTI title. Intelligence is the core of the job.

What the role covers:

- Threat actor tracking: researching the TTPs, tooling, infrastructure and targeting of the actors most relevant to the organisation
- Intelligence products: producing strategic, operational and tactical intelligence that enables threat informed decisions
- Briefing: delivering regular threat landscape briefings to technical teams and senior leadership
- Intelligence into action: working with detection, hunting and response teams to turn intelligence into detections, blocks and posture changes
- Partnerships: sharing intelligence with researchers and government agencies, and supporting incident response with actor insight

What you will bring:

- 5+ years in cyber threat intelligence, or a related intelligence role such as intrusion analysis or signals intelligence
- Deep experience researching threat actors and campaigns: TTPs, infrastructure analysis, attribution
- Strong intelligence writing, and confidence briefing technical findings to executive audiences
- Working knowledge of the intelligence lifecycle, collection requirements and frameworks such as MITRE ATT&CK; and the Diamond Model
- Government, defence or national security intelligence experience (nice to have); SANS FOR578 or similar (nice to have)

Permanent, Canberra based, hybrid.
Australian citizens only. NV1 or higher preferred; sponsorship up to NV2 available.
Salary: Up to $190,000 + Bonuses

Additional information

- Be a part of tracking threat actors that matter most
- Work with senior leadership, share intelligence with Gov partners
- Canberra Based - Need citizenship or ideally NV clearance

📌 Senior Cyber Threat Intelligence Specialist (Canberra)
🏢 Decipher Bureau
📍 Canberra