Senior Cyber Threat Intelligence Specialist
Posted
Summary
Senior threat intelligence role in Canberra: tracking relevant threat actors, producing strategic/operational/tactical intelligence, briefing leadership, and working with detection, hunting and response teams to turn intel into action, plus sharing intel with researchers and government agencies. Needs 5+ years CTI, ATT&CK/Diamond Model, Australian citizenship; up to $190k + bonuses.
Salary: 190000
This is a rare chance to join a specialist threat intelligence team inside a large, nationally recognised Australian organisation with millions of customers and a complex, national scale environment.The team's job is to understand which threats matter most to the organisation, track them closely and make sure the intelligence drives real decisions. The role is based in Canberra, where the team is growing, and part of it is building intelligence sharing relationships with security researchers and government agencies.
This is a genuine threat intelligence role, not a SOC analyst seat with a CTI title. Intelligence is the core of the job.
What the role covers:
- Threat actor tracking: researching the TTPs, tooling, infrastructure and targeting of the actors most relevant to the organisation
- Intelligence products: producing strategic, operational and tactical intelligence that enables threat informed decisions
- Briefing: delivering regular threat landscape briefings to technical teams and senior leadership
- Intelligence into action: working with detection, hunting and response teams to turn intelligence into detections, blocks and posture changes
- Partnerships: sharing intelligence with researchers and government agencies, and supporting incident response with actor insight
- 5+ years in cyber threat intelligence, or a related intelligence role such as intrusion analysis or signals intelligence
- Deep experience researching threat actors and campaigns: TTPs, infrastructure analysis, attribution
- Strong intelligence writing, and confidence briefing technical findings to executive audiences
- Working knowledge of the intelligence lifecycle, collection requirements and frameworks such as MITRE ATT&CK and the Diamond Model
- Government, defence or national security intelligence experience (nice to have); SANS FOR578 or similar (nice to have)
Permanent, Canberra based, hybrid.
Australian citizens only. NV1 or higher preferred; sponsorship up to NV2 available.
Salary: Up to $190,000 + Bonuses
For a confidential conversation, contact cwhyte@decipherbureau.com