Principal Cyber Security Analyst

About the role

The Principal Cyber Security Analyst will serve as the primary technical escalation point for the Security Operations Centre (SOC) and lead advanced cyber defence initiatives across Queensland Government entities.

Key responsibilities

• Provide technical guidance for complex or high‑severity SOC incidents and lead end‑to‑end incident response.
• Create, tune and optimise detection rules to ensure accurate threat identification with minimal false positives.
• Lead proactive threat‑hunting activities and develop detections for emerging threats.
• Evaluate, implement and optimise SOC tools and technologies.
• Develop and maintain SOPs, incident response playbooks and improve SOC processes.
• Mentor SOC analysts and contribute to whole‑of‑government security communities.

Required profile

• Extensive experience in SOC operations and cyber incident response.
• Proven ability to lead technical teams and mentor junior analysts.
• Strong analytical skills with a focus on threat intelligence and analytics.

Required skills

• Detection rule creation and optimisation.
• Threat hunting and advanced threat mitigation.
• SOC tool evaluation and implementation.
• Incident response process management.