Lead Threat Hunter

The work we do matters
We protect and defend our customers and communities by providing the most comprehensive range of cyber security professional services in the region.
With more than 1,400 team members across Australia, New Zealand, the UK and US, we are a leading force in cyber security, offering services from strategy, GRC, managed security services, cloud security, digital forensics and cyber education.
If you're ready to work with teammates that get you, a leader that supports you and customers that need you, then you're ready for CyberCX.
How You Will Make An Impact
Proactively identify latent or undetected cybersecurity threats inside networks or infrastructure, identifying areas of concern and making recommendations on preventive actions.
Day to day you will:
Lead the delivery of threat hunting engagements – in their day-to-day operations and execution, as well as design and scope.Be a subject matter expert on Threat Hunting methodologies, tactics and processes - owning CyberCX TTPs for Threat Hunting. Collaborate and engage with peers across the Digital Forensics & Incident Response, Managed Security Services and Cyber Intelligence teams to deliver successful hunt engagements.Act as an escalation point during analysis of hunt related data, and mentor less experienced team members with their work.Provide analytical or functional taskings (both tactical and operational) for other hunt team members and track overall engagement progress.Own and Present findings at the conclusion of engagements – as finished reports and verbal debriefs.
Skills & Qualifications
Tertiary or related qualifications or experience in information technology or similar5+ years' proven experience as a Threat Hunter or equivalent roleExperience in Threat Hunting operations design, planning and execution.Highly capable at consistently delivering high quality threat hunting work with little guidanceCapable of taking leading elements of threat hunt engagement managementHighly effective stakeholder engagement and communication skills, building credibility with senior leaders and internal working teamsAttainment of at least two SANS or equivalent DFIR certificationsAbility to attain a further advanced SANS or equivalent DFIR certification
Great advantages for great people
A salary package that recognises your experience plus a range of advantages (just some of which are listed below – ask us for a benefits brochure).
Flexible working in a hybrid arrangement (a blend of office and WFH) with modern and comfortable workplaces that accommodate different working styles All the usual leave entitlements plus additional paid leave options (including a day off for your birthday) and the chance to purchase extra leave each year Salary packaging options (such as a novated car lease) Health & Wellbeing program including access to our employee assistance service, mental wellness leave, online CyberCX Wellbeing Centre and workplace mental health first aiders Discounts on health insurance and gym membership plus savings on everyday groceries, electronics, technology, fuel, travel and more Personalised development planning, access to training and membership to industry organisations Employee interest groups and communities including a comprehensive Women in Cyber program A comprehensive reward and recognition program – with a special thank you every year on your anniversary
Be yourself.
We embrace diverse perspectives, experiences, and backgrounds. Please let us know if you require support or adjustments to assist with your recruitment experience.
We take security seriously
We require all employees to complete background checks (including police and global sanction list checks) annually. Please note that due to the nature of this role, it is a mandatory requirement that all applicants are Australian citizens with the ability to hold an
Australian Security Clearance.
Where appropriate, the CyberCX Talent Team will work with our preferred panel of agencies. Fees will not be paid for unsolicited resumes that are submitted directly to hiring managers and not through our approved process.