Principal Cyber Security Analyst

About the role

The Principal Cyber Security Analyst will join the Cyber Security Unit (CSU) in Brisbane, supporting the Queensland Government’s Cyber Defence Centre. You will lead technical efforts across the Security Operations Centre (SOC), incident response, threat hunting and intelligence, helping to protect government services and the community from cyber threats.

Key responsibilities

• Own Whole of Government SOC service delivery, including SIEM, External Attack Surface Management and Vulnerability Management platforms.
• Act as the technical expert for complex security incidents, guiding detection, containment, eradication, recovery and lessons‑learned.
• Perform forensic analysis, malware reverse engineering and root‑cause investigations on suspected intrusions.
• Develop and refine detection logic, reduce false‑positive alerts and improve threat‑catching capability.
• Advance SOC operational maturity by creating and maintaining Standard Operating Procedures.
• Translate data trends into actionable recommendations for strategic improvement.
• Coach and up‑skill SOC analysts, fostering a high‑performing team.
• Formulate threat‑hunting hypotheses and track government‑wide threat‑actor activity.

Required profile

• Extensive experience in a Security Operations Centre with a proven track record of leading incident response.
• Strong technical credibility and ability to raise operational maturity.
• Willingness to obtain and maintain a Baseline/NV1 National Security Clearance.
• Experience working with government security frameworks and standards.

Required skills

• Microsoft Sentinel (KQL, Analytic Rules, Workbooks, Playbooks) and Microsoft Defender XDR.
• SIEM, External Attack Surface Management (EASM) and Vulnerability Management tools.
• Knowledge of NIST, MITRE ATT&CK, D3FEND, ASD Information Security Manual and ISO‑27000 series.
• Scripting/programming in Python or PowerShell.
• Forensic tools such as Autopsy, Wireshark or SANS SIFT.
• Hands‑on experience with Linux/Unix and Windows environments.