Cyber Defence Analyst

About the role

As a Cyber Defence Analyst you will provide strategic guidance and technical analysis to detect and respond to adversarial cyber activity across the enterprise. You will work in a typical office environment, monitoring network security devices and collaborating with DoD and government leaders to strengthen the organization’s security posture.

Key responsibilities

• Monitor and maintain the functionality of firewalls, IDS/IPS and other network security appliances, responding to tiered alerts and escalating incidents.
• Perform deep packet and net‑flow analysis using Wireshark, tcpdump and custom sensor data to identify malicious traffic.
• Develop and update incident response documentation, create detailed incident reports and post‑incident briefs for decision‑makers.
• Research emerging threats, vulnerabilities and TTPs, applying frameworks such as MITRE ATT&CK and the Cyber Kill Chain to improve defenses.
• Utilise security platforms like Splunk and Elastic to generate actionable intelligence and trend analysis.

Required profile

• Bachelor’s degree in a relevant discipline with 8‑10 years of experience (or Master’s with 6‑8 years).
• Current or ability to obtain a Top‑Secret Positive Vetting (Australia) or TS/SCI (U.S.) clearance.
• GCIH or equivalent DoD 8140 incident‑response certification.
• Strong communication skills and ability to brief varied stakeholders.

Required skills

• Firewalls and IDS/IPS devices (e.g., Snort, Suricata).
• Network protocol expertise – TCP/IP, DNS, HTTP, ICMP, SSL/TLS.
• Packet capture analysis tools – Wireshark, tcpdump.
• Security information and event management – Splunk, Elastic.
• Threat‑analysis frameworks – MITRE ATT&CK, Cyber Kill Chain.