Clearance: PV Required
The Senior Cyber Threat Hunt & Emulation Specialist plays a critical role within a high?performance Security Operations Centre, leading advanced threat detection, proactive hunting, adversary emulation and complex incident response. This position provides deep technical leadership, acting as the escalation point for junior analysts and driving continuous uplift of detection capability, response maturity and overall cyber defence posture.
Key Responsibilities
- Lead investigation and response activities for high?severity and complex cyber security incidents, ensuring rapid containment, eradication and recovery.
- Serve as the primary escalation point for Level 1 and Level 2 SOC analysts, providing expert guidance on advanced threats, attacker behaviours and investigative techniques.
- Develop, tune and optimise detection use cases, correlation rules and alerting logic across SIEM, EDR and related security platforms.
- Conduct proactive threat hunting and adversary emulation to uncover previously undetected behaviours, gaps and vulnerabilities.
- Analyse, produce and operationalise threat intelligence, integrating insights into detection engineering and incident response workflows.
- Drive continuous improvement of SOC processes, playbooks and response methodologies while mentoring analysts and uplifting team capability.
- Current PV clearance.
- Bachelor’s degree and/or relevant industry certifications.
- 8–10+ years’ experience in cyber security roles, with significant exposure to SOC operations in government or highly regulated environments.
- Strong expertise in threat detection, incident response and digital forensics.
- Deep understanding of attacker TTPs and frameworks such as MITRE ATT&CK.
- Proven ability to triage and investigate complex incidents independently.
- Demonstrated experience in threat hunting and developing detection content.
- Strong knowledge of Windows and Linux operating systems, network protocols and enterprise security tooling.
- Experience collecting, analysing and operationalising threat intelligence.
- Proficiency in scripting/automation (Python, PowerShell) to support investigations and response.
- Excellent communication skills, with the ability to translate technical issues for diverse audiences.
- Demonstrated capability to mentor and uplift junior SOC analysts.
- Familiarity with security frameworks such as NIST
and ISO 27001.
- Experience with automation tooling within security operations (desirable).
- Managing competing priorities within a dynamic, high?tempo operational environment.
- Building strong relationships with internal teams and external partners to support effective cyber defence.
- Defending networks against sophisticated threat actors.
- Navigating and optimising a complex ecosystem of security tools and technologies.
- Delivering effective automation solutions to enhance SOC efficiency.
- Maintaining continuous professional growth through mentoring and self?directed learning.
We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.
#SCR-payton-vercoe
