Threat Intelligence Specialist
A leading research and education network is seeking a highly skilled Threat Intelligence Specialist to join our Security Services division.
The successful candidate will play a pivotal role in safeguarding our research and education community against malicious actors on the Internet. This includes designing and delivering actionable threat intelligence solutions, building dashboards, performing data enrichment, and mining large volumes of Internet traffic and customer log data to identify, analyse, and respond to emerging cyber threats.
The ideal candidate will have a solid understanding of cyber threats and the threat intelligence lifecycle, with proven experience in identifying, analysing, and mitigating malicious online activities. They will also be familiar with security-oriented data sources, such as SIEM logs and threat intelligence platforms, and have hands-on experience in building or contributing to threat analysis and/or hunting programs.
The Threat Intelligence Specialist will work closely with data scientists, SOC engineers, and analysts to develop and continuously evolve our threat analysis strategies. They will also collaborate with the larger SOC team and customers to investigate and report malicious cyber activities, providing in-depth analysis for stakeholders.
Strong communication skills and an ability to collaborate effectively across multidisciplinary teams are essential for this role. The successful candidate will also be able to take accountability for designated tasks and guide initiatives from inception through to completion.
Australian citizenship or permanent residency is required for this position.
Key Responsibilities:
Design and implement threat insights, dashboards, and automated enrichments for cyber threat intelligence.
Leverage SOC data feeds and third-party threat intelligence from government and commercial providers to derive actionable insights.
Develop and continuously evolve our threat analysis strategies to proactively identify malicious activities within our customers' environments based on observed data insights.
Collaborate with the larger SOC team and customers to investigate and report malicious cyber activities, providing in-depth analysis for stakeholders.
Work alongside data scientists, analysts, and the reporting manager to build prototypes, reports, and visualisations that illuminate emerging threats for the SOC and customers.
Mine AARNet's unique position as an ISP to analyse large-scale Internet data and identify key trends, themes, and anomalies impacting the higher education sector.
Contribute to the development of software and scripts that integrate and operationalise SOC datasets for threat hunting, vulnerability discovery, and other security missions.
Expand our library of datasets (including new customer log sources, additional threat intelligence) and integrate new capabilities into existing tools and analytics platforms.
Partner with SOC analysts, detection and automation engineers, and data parsing teams to ensure seamless data ingestion, normalisation, and correlation.
Mentor junior staff members, sharing best practices and technical expertise, and foster a collaborative, knowledge-sharing culture.
Investigate and explore emerging technologies, methodologies, and approaches for advanced threat detection and response.
Cultivate a mindset of discovery to uncover the cyber threat landscape.