Cyber Threat Detection & Response Analyst
HybridSydney, New South Wales, Australia
Job Summary
Monitor security alerts from SIEM, EDR, and other detection technologies while conducting proactive threat hunting to identify suspicious activity. Analyze network traffic and system logs to detect patterns, building complex KQL queries to hunt for sophisticated file-less and living-off-the-land techniques. Develop custom detection rules and threat models based on current intelligence, tuning logic to reduce false positives. Respond to security incidents by investigating, coordinating remediation, and executing containment, eradication, and recovery actions. Operate threat intelligence feeds and map emerging campaigns to the MITRE ATT&CK framework to close telemetry gaps.
Required Qualifications
- 5+ years of experience in cybersecurity, with a focus on threat detection, incident response, and threat intelligence, in the payments industry
- Strong understanding of security principles, authentication, authorisation, and access control mechanisms
- Expertise with security monitoring and incident response tools (e.g., SIEM, EDR, SOAR, Threat intelligence platforms)
- Deep, demonstrable expertise in Kusto Query Language (KQL) for Microsoft Sentinel, Defender XDR, or Azure Data Explorer
- Strong knowledge of common attack vectors, malware, and exploitation techniques
- Proven ability to translate intelligence reports and threat actor profiling into engineering requirements
- Experience with scripting and automation (Python, PowerShell, etc.) to streamline detection and response activities
- Proven experience leading high-severity incident responses in a fast-paced environment
- Practical experience with purple teaming, Atomic Red Team, or executing MITRE ATT&CK-aligned validation tests
- ATM/EFT/POS technology experience in mission-critical environments
- Knowledge of security frameworks and standards such as ISO 27001, NIST, CPS234, ASD Essential 8 etc
- Understanding of legal, regulatory, privacy and security matters associated with the Banking and Finance Industry
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.