Cyber Threat Intelligence Specialist

As Australia's leading research and education network, we are committed to delivering world-class infrastructure and services that support the academic and research community.

This role is an exciting opportunity for a skilled Threat Intelligence Engineer to join our Security Services team. You will play a key part in safeguarding our research and education community against malicious actors on the Internet.

Situated in our Data Insights team, you'll collaborate closely with data scientists, SOC Engineers, and SOC analysts to design and deliver actionable threat intelligence solutions. This includes building dashboards, performing data enrichment, and mining large volumes of Internet traffic and customer log data to identify, analyse, and respond to emerging cyber threats.

You will be responsible for developing threat analysis and hunting insights, creating novel data-driven solutions, and sharing insights that reinforce the defensive capabilities of both our SOC and our customers. Drawing on threat intelligence feeds from higher education, government, and commercial partners, you will craft threat insights and tools that not only illuminate current risks but also anticipate the unexpected.

Our team works collaboratively to provide innovative solutions that enhance our collective visibility into the cybersecurity landscape and help protect Australia's academic and research institutions.

• Design and implement threat insights, dashboards, and automated enrichments for cyber threat intelligence.
• Leverage SOC data feeds and third-party threat intelligence from government and commercial providers to derive actionable insights.

• A solid understanding of cyber threats and the threat intelligence lifecycle, with proven experience in identifying, analysing, and mitigating malicious online activities.
• Experience working with security-oriented data sources (e.g., SIEM logs, threat intelligence platforms) and familiarity with data normalisation and correlation techniques.
• Hands-on experience in building or contributing to threat analysis and/or hunting programs, ideally within a SOC environment.
• Demonstrated proficiency with industry-standard TI frameworks and transport protocols—STIX/TAXII, MITRE ATT&CK and NIST CSF 2.0—using them as a common language for analytics and reporting.
• Strong communication skills and an ability to collaborate effectively across multidisciplinary teams.
• Bachelor's, Master's, or equivalent in Computer Science, Data Science, Cybersecurity, UX Design, or a related field, or 4+ years' work experience within a SOC or Security Threat Research environment.
• Must be an Australian Citizen or Permanent Resident.

• Competitive remuneration;
• 17% superannuation;
• Flexible work options including a hybrid work model;
• Focus on wellbeing – year-round initiatives and social engagement activities;
• Ethical Leadership: A sector leader in cyber security, social responsibility, and equal opportunity;
• Options to purchase additional Annual Leave;
• 2 days paid Women's Wellness Leave per month;
• 24 weeks paid Parental Leave – Primary Carer;
• Welcome back to AARNet superannuation payment – on unpaid Parental Leave for Primary Carer;
• 24 weeks paid - Adoption Leave;
• 16 weeks paid Parental Leave – Secondary Carer;
• 2 days paid Family Wedding Leave;
• 24 weeks paid – Foster Carer Leave;
• 5 days paid – Fertility Leave;
• 8 weeks paid – Gender Affirmation Leave;
• Strong Equal Opportunity focus;
• Modern office environment: Hotdesking system and new facilities;
• Support your success: A culture and company structure that allows your career to grow with access to leading edge technologies;
• An opportunity to give back to the academic and research sector.