Principal Cyber Security Analyst

Principal Cyber Security Analyst AO7 The Cyber Defence team within the Department of Customer Services, Open Data and Small and Family Business’s Queensland Government Cyber Security Unit (QGCSU) help Queensland Government entities better prevent, prepare for, respond to, and recover from, cyber incidents through a centrally led program. As a key member of the team, you will be required to provide technical leadership, develop and deliver services and work closely with staff and key stakeholders to deliver a broad range of security services such as incident detection, response, threat intelligence and analytics and threat hunting to improve Whole of Government (WofG) cyber defence capabilities.

As The Principal Cyber Security Analyst, You Will

• Act as the primary technical escalation point for SOC operations including complex or high-severity incidents, providing technical guidance and decision making support to the SOC team.
• Create, tune and optimise detection rules, ensuring accurate threat identification and minimal false positives.
• Lead and coordinate the end-to-end cyber incident response process, including detection, containment, eradication, recovery, and post-incident review to minimise risk exposure for Government entities.
• Lead the proactive threat hunting function, identifying and mitigating advanced threats and implementing detections for emerging threats.
• Evaluate, implement, and optimise SOC tools and technologies to enhance detection, response and threat hunting capabilities.
• Lead initiatives to improve and mature SOC processes, ensuring alignment with industry best practices.
• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks to ensure operational consistency and efficiency.
• Provide input into strategic planning for SOC operations, initiatives and resource allocation through analysing trends and metrics.
• Provide mentorship, guidance and support to SOC analysts to enhance team capability fostering a culture of continuous learning and professional development.
• Contribute to the broader security community across whole of Government through presenting at security meet ups/forums, Communities of Practice, and other cross-organisational environments.
• Perform on call duties as required.

Occupational group IT & Telecommunications