2 Lead Cyber Security Analysts

Lead Cyber Security Analysts
Canberra ACT | Hybrid (2 days WFH) | 12 month contract + extensions

We are seeking two experienced Lead Cyber Security Analysts to support a large federal government cyber program. This is a hands-on technical leadership role focused on strengthening security monitoring, detection, and response capabilities through SIEM and related tooling.

About the role

You will work within a Cyber Security Operations function, playing a key role in designing, implementing, and optimising Security Information and Event Management capabilities. You will ensure effective ingestion, correlation, and analysis of security events to support threat detection, incident response, and compliance with government frameworks.

Key responsibilities

• Design, build, and implement SIEM logging solutions including ingestion, storage, and querying
• Develop and maintain technical documentation for SIEM and logging implementations
• Identify gaps in security event logging, alerting, and detection capabilities
• Build and enhance detection use cases across SIEM and SOAR platforms
• Tune and optimise logs, alerts, and rules to improve security outcomes
• Collaborate with internal teams and third party vendors to deliver cyber capability uplift
• Provide informed security advice to stakeholders, including senior leadership
• Support uplift of security posture aligned to government standards such as ISM and Essential Eight

Required experience

• Strong hands on experience with Azure and Microsoft Sentinel
• Proven experience ingesting logs, developing use cases, and tuning detection capabilities
• Demonstrated ability to document solutions and implement security policies
• Experience advising stakeholders and contributing at a senior level
• Background working within a cyber security team environment

Desirable experience

• Familiarity with government security frameworks including ISM, PSPF, and Essential Eight

Additional details

• Location: Canberra ACT. Candidates must be ACT based
• Working arrangement: Hybrid with up to 2 days working from home
• Contract: 12 months initial term with up to 2 extensions of 12 months
• Hours: Up to 40 hours per week
• Security: Negative Vetting Level 1 clearance is required
• Start date: Early July 2026