Cyber Security Threat Hunt & Detection Analyst

Cyber Security Threat Hunt & Detection Analyst at nbn Australia

An exciting opportunity awaits for a passionate Cyber Security Threat Hunt & Detection Analyst to join our dynamic Cyber Security Practice team. In this pivotal role, reporting to the Executive Manager, Threat Hunt and Detection Engineering, you’ll be at the forefront of protecting Australia’s digital future.

Your Role as a Cyber Security Threat Hunt & Detection Analyst

In this role, you will help strengthen nbn’s proactive cyber defence by conducting threat hunts and developing detection analytics. You will work within nbn’s converged all-hazards model and risk-based governance framework, using internal telemetry, external intelligence, and MITRE ATT&CK mapping to identify suspicious behaviours and emerging attack techniques. When threats are validated, you will escalate findings for rapid containment.

You will also contribute to detection-as-code across SIEM, XDR, and EDR platforms by creating and refining detection rules, tuning alerts to reduce false positives, and updating runbooks and playbooks. Collaboration will be key as you partner with platform owners to validate data quality and coverage for priority signals and work closely with Incident Response to turn lessons learned into improved detections and automated enrichments. You will maintain audit-ready documentation and apply privacy-by-design principles when handling sensitive information. This position includes participation in a 24/7 on-call roster, providing expert guidance during and outside business hours to ensure timely containment, investigation, and recovery from cyber threats.

What nbn Australia is Looking For

You have experience in threat hunting and detection engineering within modern security platforms and a strong understanding of adversary tactics and frameworks such as MITRE ATT&CK. You enjoy writing detection-as-code and automating processes, and you thrive in collaborative environments where clear communication is essential. You bring a problem-solving mindset and a passion for staying ahead of emerging threats, and you are comfortable working within a rotating on-call schedule.

About nbn Australia

To be part of nbn is to be part of something bigger. There’s so much more from here. Our pioneering spirit drives us forward every day. Together, we help lift the digital capability of the nation by building and connecting Australia’s best fibre infrastructure into homes and businesses, plus places and things, everywhere. We’re continuing to create Australia’s network—a network made for more. Not just a way for everyone to do the things they love but transforming the way they do them.

Diversity & Inclusion at nbn Australia

nbn is committed to an inclusive, flexible, and supportive workplace where everyone can feel heard, valued, and respected. We believe diverse perspectives are the key to unlocking greater outcomes and encourage applications from people of all ages, nationalities, abilities, and cultures. That's why we have a Reconciliation Action Plan, Accessibility & Inclusion Plan, offer 18 weeks of paid parental leave, are a Pride in Diversity Gold Employer for three years running, and have active employee-led diversity pillars. Click here to see our list of employee benefits and why we're recognised as a WORK180 Endorsed Employer for Women.

We champion equal opportunities for all employees. If you have any special requests or accessibility requirements throughout the recruitment process, please recommend us at the time of application (via recruitment@nbnco.com.au) and we will adjust to meet your needs.

Application Process

If you think this role might be for you, we want to hear from you. Please apply by following the links and sending in your resume only. We do not require a cover letter or any selection criteria to be addressed.

Please note that this role is a permanent opportunity. Applications for this role will close at midnight on 22nd of February.

Key skills/competency

• Threat Hunting
• Detection Engineering
• SIEM (Security Information and Event Management)
• XDR (Extended Detection and Response)
• EDR (Endpoint Detection and Response)
• MITRE ATT&CK Framework
• Detection-as-Code
• Incident Response
• Cyber Security Analysis
• Automation