Lead Cyber Security Analyst
Summary
A hands-on Lead Cyber Security Analyst role in Sydney (hybrid) acting as technical second-in-command in Cyber Operations: leading incident response, threat hunting and SOC maturity for a large enterprise. Core stack includes SIEM, EDR/XDR, SOAR automation and MITRE ATT&CK-based detection.
Salary: $150k - $180k p.a. + Super
Lead Cyber Security Analyst
Hybrid - Sydney
We are seeking an experienced Lead Cyber Security Analyst to play a critical role in protecting enterprise systems, networks and sensitive information assets. Reporting to the Cyber Operations Manager, this hands-on technical position will lead cyber incident response activities, proactive threat hunting initiatives and the ongoing maturity of a hybrid Security Operations Centre (SOC).
Acting as the technical second-in-command within Cyber Operations, you will serve as the lead investigator during security incidents. This role combines deep technical expertise with the opportunity to influence cyber defence strategy and operational effectiveness across a large and complex enterprise environment.
Key Responsibilities
- Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
- Act as the primary technical escalation point for complex security events and threats.
- Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
- Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
- Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
- Refine incident response playbooks, procedures and SOAR-based automation workflows.
- Support security exercises, tabletop simulations and incident response readiness activities.
- Mentor security analysts and provide technical guidance across cyber operations functions.
- Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.
Required Experience & Skills
- Extensive experience in cyber security operations within a large enterprise environment.
- Strong hands-on experience leading cyber incident response and investigation activities.
- Proven capability in threat hunting, threat detection and security monitoring.
- Advanced experience with SIEM, EDR/XDR and security analytics platforms.
- Deep knowledge of modern cyber threats, attacker techniques and the MITRE ATT&CK framework.
- Experience developing detection content, response playbooks and operational procedures.