Lead Cyber Security Analyst

Lead Cyber Security Analyst

Hybrid - Sydney

We are seeking an experienced Lead Cyber Security Analyst to play a critical role in protecting enterprise systems, networks and sensitive information assets. Reporting to the Cyber Operations Manager, this hands-on technical position will lead cyber incident response activities, proactive threat hunting initiatives and the ongoing maturity of a hybrid Security Operations Centre (SOC).

Acting as the technical second-in-command within Cyber Operations, you will serve as the lead investigator during security incidents. This role combines deep technical expertise with the opportunity to influence cyber defence strategy and operational effectiveness across a large and complex enterprise environment.

Key Responsibilities

• Lead the technical investigation, containment, eradication and recovery of cyber security incidents using SIEM, EDR, SOAR and other security monitoring tools.
• Act as the primary technical escalation point for complex security events and threats.
• Provide technical oversight and quality assurance of MSSP investigations, escalations and monitoring activities.
• Conduct proactive threat hunting activities using threat intelligence and frameworks such as MITRE ATT&CK
• Develop and enhance detection rules, use cases and monitoring capabilities to improve threat visibility.
• Refine incident response playbooks, procedures and SOAR-based automation workflows.
• Support security exercises, tabletop simulations and incident response readiness activities.
• Mentor security analysts and provide technical guidance across cyber operations functions.
• Monitor emerging threats, attack techniques and industry trends to continually improve cyber defence capability.

Required Experience & Skills

• Extensive experience in cyber security operations within a large enterprise environment.
• Strong hands-on experience leading cyber incident response and investigation activities.
• Proven capability in threat hunting, threat detection and security monitoring.
• Advanced experience with SIEM, EDR/XDR and security analytics platforms.
• Deep knowledge of modern cyber threats, attacker techniques and the MITRE ATT&CK framework.
• Experience developing detection content, response playbooks and operational procedures.