Cyber Security Analyst

Senior Cyber Threat Analyst / Threat Detection Engineer

Location: Canberra, ACT

Work arrangement: Hybrid

Contract: 12 months with up to 2 x 12-month extension options

Hours: Up to 40 hours per week

Expected commencement: 17 October 2026

Experience level: Senior / APS6 equivalent

Security clearance: Current Baseline or the ability to obtain one

Azooa is seeking an experienced Senior Cyber Threat Analyst / Threat Detection Engineer for a long-term contract supporting an Australian Government client.

This is a hands-on detection engineering role focused on designing, implementing and continuously improving enterprise threat-detection capabilities across SIEM, SOAR and EDR platforms.

ABOUT THE ROLE

You will develop high-quality detection content, integrate security platforms, automate incident-response workflows and apply threat intelligence and threat-modelling techniques to strengthen enterprise security operations.

KEY RESPONSIBILITIES

• Develop and maintain detection content across enterprise SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar and Elastic Security.

• Create detection rules, queries, dashboards and security use cases.

• Integrate detection capabilities across SIEM, SOAR and EDR technologies.

• Develop and maintain automated response workflows and incident-response playbooks.

• Conduct threat modelling using frameworks such as MITRE ATT&CK, STRIDE or PASTA.

• Apply cyber-threat intelligence to detection engineering and security operations.

• Improve alert quality, reduce false positives and strengthen detection coverage.

• Support threat hunting, incident response and security investigations.

• Develop monitoring for emerging AI-related threats, including prompt injection, data leakage and model abuse.

• Produce technical documentation, operational procedures and detection-engineering guidance.

ESSENTIAL EXPERIENCE

Successful candidates will demonstrate:

• At least five years of cybersecurity operations experience.

• Hands-on experience developing detection content across at least two enterprise SIEM platforms.

• Experience integrating SIEM, SOAR and EDR technologies.

• Experience developing automation workflows or incident-response playbooks.

• Practical knowledge of threat modelling and cyber-threat intelligence.

• Strong scripting, analytical and technical-documentation capabilities.

• Strong communication and stakeholder-engagement skills.

HIGHLY REGARDED

Experience with one or more of the following will be advantageous:

• Sigma detection rules.

• Microsoft Defender.

• CrowdStrike.

• VMware Carbon Black.

• Cortex XSOAR or similar SOAR platforms.

• KQL, Python, PowerShell or Bash.

• Australian Government security environments.

• AI security monitoring and detection.

SECURITY REQUIREMENTS

Candidates must be Australian citizens and hold a current Baseline clearance or be eligible to obtain one. Eligible Australian citizens may be sponsored for a new Baseline clearance.

Candidates holding NV1, NV2, PV or TSPV clearances may also apply, although the engagement may not maintain a clearance above Baseline.

WORKING ARRANGEMENTS

The role is based in Canberra and classified as hybrid. Interstate remote work may be considered case by case, subject to operational requirements.

RATE GUIDANCE

Azooa's recommended maximum candidate rate is up to $165 per hour, including super. A rate around $140 per hour, including super, would provide a particularly competitive value-for-money position.

Candidates contracting through an ABN or ACN should provide their proposed hourly rate excluding GST. Strong candidates with higher rate expectations are still encouraged to apply.

ABOUT AZOOA

Azooa is an Australian technology, consulting and professional-services company supporting complex Federal Government programs. We work closely with experienced professionals to identify suitable opportunities, prepare competitive submissions and provide ongoing contractor support.

APPLICATION REQUIREMENTS

Please apply with:

• Your current CV or resume.

• Current residential location.

• Security-clearance level or confirmation that you can obtain Baseline.

• Availability and earliest commencement date.

• Expected hourly rate, including super for PAYG or excluding GST for ABN/ACN arrangements.

Azooa Pty Ltd

Federal Government ICT Contracting

https://azooa.com.au