" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSenior Cyber Threat Intelligence Specialist\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"14076\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"14077\"\u003e Permanent / Full Time \u003c/li\u003e \u003cli data-id=\"14078\"\u003e ACT \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 5/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eBe a part of tracking threat actors that matter most\u003c/li\u003e \u003cli\u003eWork with senior leadership, share intelligence with Gov partners\u003c/li\u003e \u003cli\u003eCanberra Based - Need citizenship or ideally NV clearance\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e This is a rare chance to join a specialist threat intelligence team inside a large, nationally recognised Australian organisation with millions of customers and a complex, national scale environment.\u003cbr\u003e\u003cbr\u003eThe team\u0027s job is to understand which threats matter most to the organisation, track them closely and make sure the intelligence drives real decisions. The role is based in Canberra, where the team is growing, and part of it is building intelligence sharing relationships with security researchers and government agencies.\u003cbr\u003e\u003cbr\u003eThis is a genuine threat intelligence role, not a SOC analyst seat with a CTI title. Intelligence is the core of the job.\u003cbr\u003e\u003cbr\u003eWhat the role covers:\u003cbr\u003e \u003cul\u003e \u003cli\u003eThreat actor tracking: researching the TTPs, tooling, infrastructure and targeting of the actors most relevant to the organisation\u003c/li\u003e \u003cli\u003eIntelligence products: producing strategic, operational and tactical intelligence that enables threat informed decisions\u003c/li\u003e \u003cli\u003eBriefing: delivering regular threat landscape briefings to technical teams and senior leadership\u003c/li\u003e \u003cli\u003eIntelligence into action: working with detection, hunting and response teams to turn intelligence into detections, blocks and posture changes\u003c/li\u003e \u003cli\u003ePartnerships: sharing intelligence with researchers and government agencies, and supporting incident response with actor insight\u003c/li\u003e \u003c/ul\u003e What you will bring:\u003cbr\u003e \u003cul\u003e \u003cli\u003e5+ years in cyber threat intelligence, or a related intelligence role such as intrusion analysis or signals intelligence\u003c/li\u003e \u003cli\u003eDeep experience researching threat actors and campaigns: TTPs, infrastructure analysis, attribution\u003c/li\u003e \u003cli\u003eStrong intelligence writing, and confidence briefing technical findings to executive audiences\u003c/li\u003e \u003cli\u003eWorking knowledge of the intelligence lifecycle, collection requirements and frameworks such as MITRE ATT\u0026amp;CK and the Diamond Model\u003c/li\u003e \u003cli\u003eGovernment, defence or national security intelligence experience (nice to have); SANS FOR578 or similar (nice to have)\u003c/li\u003e \u003c/ul\u003e This would suit a CTI specialist with a government or defence intelligence background, or someone in consulting or an MSSP who wants intelligence to be the main job again.\u003cbr\u003e\u003cbr\u003ePermanent, Canberra based, hybrid.\u003cbr\u003eAustralian citizens only. NV1 or higher preferred; sponsorship up to NV2 available.\u003cbr\u003eSalary: Up to $190,000 + Bonuses\u003cbr\u003e\u003cbr\u003eFor a confidential conversation, contact cwhyte@decipherbureau.com \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4484098\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "