Threat Intelligence Engineer

3 weeks ago


Canberra, Australia Softtest pays pty ltd Full time

Please respond to the job if you are an Australian Citizen and residing in Australia.

Key Responsibilities:

  • Create threat models and preform threat hunts to inform the detection engineering strategy
  • Develop use cases based off threat models, system risks, vulnerabilities, intelligence, incident reports and industry frameworks
  • Develop the detection rule syntax associated with use cases within the SIEM and EDR technologies
  • Develop playbooks for alert validation by understanding the context in which the detection rule is designed
  • Collaborate with Cyber Defence Analysts for detection rule tuning
  • Maintain the threat intelligence integrations across the SOC technology stack
  • Assist in the identification of content shortfalls across the detection engineering practice
  • Assist with incident response at that direction of the incident manager
  • Conduct in-depth research and analysis for new detection content
  • Assist in the onboarding of new data sources to meet requirements of use cases
  • Provide evaluation and feedback necessary for improving intelligence production and reporting
  • Provide support to designated exercises, planning activities, and time sensitive operations

Every application requires to address selection criteria as part of application submission

Essential Criteria

Demonstratable experience in content development with at least 2 SIEM technologies (Splunk, Elastic, Q-Radar, MS Sentinel)

Experience in a detection engineering practice

An understanding of the sigma detection rule syntax

Experience with SOAR technologies and playbook development

Experience with EDR technologies (Carbon Black, CrowdStrike, Defender ATP)

A thorough understanding of the cyber threat intelligence lifecycle

Knowledge of scripting languages (Bash, Python)

Strong organisational and teamwork skills.

Professional Certifications, such as GIAC

Minimum 5 years of cyber security operations experience



  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Position Type: Ongoing - Salary: $79,234 - $84,019 **About the role** Intelligence Analysts contribute to the planning, development and production of intelligence outcomes and outputs. The position supports the planning, collection and analysis of ACIC’s bulk data collection and flagship products (Waste Water Program and Illicit Drugs...

  • Cyber Vulnerability

    4 weeks ago


    Canberra, Australia HiTech Personnel Full time

    **Reference #**: - JF/ST0035**Title**: - Cyber Vulnerability / Threat Analyst - Vulnerability**Category**: - ICT**Location**: - ACT**Work Type**: - Contract**Remuneration**: - $Neg**Term**: - 12 months**Description**: - High Profile Federal Government Department! - Initial 12 month contract with 2 x 12 month extension options! - Rewarding hourly...


  • Canberra, Australia Canberra Consulting Full time

    Work in the city + Flexible working conditions - Long term contract - Initial 12 Months + extension - An Australian citizen with a Negative Vetting 1 Security Clearance **About us** Canberra Consulting focuses on delivering highly skilled and qualified professionals to our clients. Canberra Consulting has the experience and the capability to understand...


  • Canberra, Australia Softtest pays pty ltd Full time

    Australian Citizens residing in Australia only respond. Must have NV1.Essential criteriaConduct Threat Assessments as requiredCreate Cyber Threat Intelligence productsPerform assessments of vulnerabilities when new CVEs areannouncedPerform business impact analysis of vulnerabilities in relation toDFAT systemsConduct meetings, create associated reports,...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Position Type: Ongoing - Salary: $90,199-$101,745 **About the role** Intelligence Analysts contribute to the planning, development and production of intelligence outcomes and outputs for the ACIC. This position is responsible for supporting the planning, collection and exploitation of ACIC’s bulk data collection and capability in line...


  • Canberra, Australia Australian Government Department of Defence Full time

    The Role As a Technical Intelligence Analyst focussing on guided weapons, you will use your unique technical expertise to analyse and report on weapon systems and defence technologies that may pose threats to Australian forces. You will access and analyse a broad range of information sources, collaborate with other specialists, and use your research and...


  • Canberra, Australia Australian Government Department of Defence Full time

    The Role As a Technical Intelligence Analyst focussing on guided weapons, you will use your unique technical expertise to analyse and report on weapon systems and defence technologies that may pose threats to Australian forces.  You will access and analyse a broad range of information sources, collaborate with other specialists, and use your research...


  • Canberra, Australia ASIO Full time

    **The Organisation** The Australian Security Intelligence Organisation (ASIO) protects Australia and Australians from threats to their security. In a complex, challenging and changing security environment, our success is built on the imagination and intelligence of our team. ASIO's people are ordinary Australians but they do extraordinary things - they...


  • Canberra, Australia Australian Government Full time

    $115,899 - $130,733 (plus Super and 10% BDCP) - Canberra - ACT **The Role** As a Technical Intelligence Analyst in the Defence Intelligence Group (DIG) you will work to understand foreign threats - including weapons systems and associated platforms - using highly technical, scientific and engineering analysis. You will communicate your findings to...


  • Canberra, Australia Hughes and Jones Consulting Full time

    Australia's leading cyber security intelligence consultancy continuing to expand cyber security operations, threat analytics, security integration and engineering capability for large enterprise projects. Fast-paced dynamic environment offering excellent career advancement opportunities and training structure to support ongoing certification and further...


  • Canberra, Australia Hughes and Jones Consulting Full time

    Australia's leading cyber security intelligence consultancy continuing to expand cyber security operations, threat analytics, security integration and engineering capability for Government and Defence projects. Fast-paced dynamic environment offering excellent career advancement opportunities and training structure to support ongoing certification and...


  • Canberra, Australia CyberCX Full time

    Based on-site in Canberra (not remote) - Must be a United States citizen - Deliver a patented new approach to cybersecurity **About the company** CyberCX is joining forces with one of the most exciting cyber security companies from the United States to deliver projects for the Australian market. You will be trained to deliver a patented, groundbreaking...

  • Intelligence Manager

    4 weeks ago


    Canberra, Australia Department of Foreign Affairs and Trade Full time

    _**Passport to the future of intelligence**_ - Ever wanted to be a spy? Well, not exactly. But imagine using your smarts and intuition to crack down on international crime rings that prey on people’s identities. As an Intelligence Analyst in the Passport Fraud and Integrity Section, you will be on the front lines of protecting national security, one...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Position Type: Ongoing/ Non-Ongoing | Full-time/Part-time - Salary: $65,103 - $70,266 The Australian Criminal Intelligence Commission (ACIC) is Australia’s national criminal intelligence agency. We advise senior decision makers on serious and organised crime impacting Australia. We are a full member of the National Intelligence...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Job Type: Ongoing, Full-time The Australian Criminal Intelligence Commission (ACIC) is Australia's national criminal intelligence agency. We advise senior decision makers on serious organised crime impacting Australia. We are a full member of the National Intelligence Community, an Attorney General Portfolio agency, and a member of the...


  • Canberra, Australia CyberCX Full time

    Must be based in Canberra (not remote) - Must be a United States citizen **About the company** CyberCX is joining forces with one of the most exciting cyber security companies from the United States to deliver projects for the Australian market. You will be trained to deliver a patented, groundbreaking new approach to cybersecurity that identifies, stops,...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Job Type: Ongoing/Non-ongoing, Full-time - Salary: APS6 $86,452 - $97,832 pa plus superannuation The Australian Criminal Intelligence Commission (ACIC) is Australia’s national criminal intelligence agency. We advise senior decision makers on serious and organised crime impacting Australia. We are a full member of the National...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Job Type: Ongoing/ Non-Ongoing - Salary: $136,177 - $153,430 p.a plus 15.4% superannuation The Australian Criminal Intelligence Commission (ACIC) is Australia’s national criminal intelligence agency. We advise senior decision makers on serious and organised crime impacting Australia. We are a full member of the National Intelligence...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Job Type: Ongoing/ Non-Ongoing - Salary: $86,452 - $97,832 p.a. plus superannuation The Australian Criminal Intelligence Commission (ACIC) is Australia’s national criminal intelligence agency. We advise senior decision makers on serious and organised crime impacting Australia. We are a full member of the National Intelligence...


  • Canberra, Australia Australian Criminal Intelligence Commission (ACIC) Full time

    Location: Canberra - Job Type: Ongoing full-time - Salary: $71,560-$77,699 The Australian Criminal Intelligence Commission (ACIC) is Australia’s national criminal intelligence agency. We advise senior decision makers on serious and organised crime impacting Australia. We are a full member of the National Intelligence Community, an Attorney General’s...