Principal Cyber Security Analyst

About the role

The Principal Cyber Security Analyst will act as the primary technical escalation point for SOC operations, leading incident response, threat hunting and the optimisation of detection capabilities across Queensland Government entities.

Key responsibilities

• Provide technical guidance for complex or high‑severity incidents and support SOC decision‑making.
• Create, tune and optimise detection rules to ensure accurate threat identification with minimal false positives.
• Lead end‑to‑end cyber incident response, from detection through post‑incident review.
• Drive proactive threat‑hunting activities and implement detections for emerging threats.
• Evaluate, implement and optimise SOC tools and technologies.
• Develop and maintain SOPs, incident response playbooks and improve SOC processes.
• Mentor and support SOC analysts, fostering continuous learning.

Required profile

• Extensive experience in SOC operations and cyber incident response.
• Proven ability to lead technical teams and mentor junior analysts.
• Strong analytical skills with a focus on improving detection and response capabilities.

Required skills

• Incident detection and response
• Threat hunting
• SOC tool evaluation and optimisation
• Creation and tuning of detection rules
• Development of SOPs and playbooks