" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePrincipal Cyber Security Analyst\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20749\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20751\"\u003e Brisbane \u003c/li\u003e \u003cli data-id=\"20752\"\u003e Contract or Temp \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 12/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eSenior DFIR role focused on complex cyber incident investigations and response.\u003c/li\u003e \u003cli\u003eDevelop technical playbooks, leverage security tools and mentor analysts\u003c/li\u003e \u003cli\u003eBrisbane CBD based | $110 per hour + super | 6-12 month contract\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eSetting the Scene\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eOur client is a large organisation operating within a complex technology environment, with a strong focus on strengthening its cyber security capabilities and protecting critical services and information. As part of its ongoing investment in cyber security operations, the organisation is seeking an experienced Principal Cyber Security Analyst to join its established cyber security team. This is an opportunity for a technically capable security professional to play a key role in incident response, digital forensics and the continuous improvement of operational cyber security capabilities.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e\u003cstrong\u003eThe Role\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eAs a Principal Cyber Security Analyst, you\u0027ll take a senior, hands-on role in the investigation, management and response to cyber security incidents. With a strong focus on Digital Forensics and Incident Response (DFIR), you\u0027ll be responsible for investigating complex security events, coordinating response activities and developing technical playbooks to strengthen incident response capability.\u0026nbsp;\u003cbr\u003e\u003cstrong\u003e\u003cbr\u003eKey Responsibilities\u003c/strong\u003e\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003e \u003cul\u003e \u003cli\u003eLead and undertake complex cyber security incident investigations, including digital forensics, incident analysis, containment and remediation.\u003c/li\u003e \u003cli\u003eManage and coordinate incident response activities, ensuring security incidents are effectively investigated, escalated and resolved.\u003c/li\u003e \u003cli\u003eDevelop, maintain and continuously improve technical incident response playbooks, procedures and operational documentation.\u003c/li\u003e \u003cli\u003eLeverage Microsoft security technologies to investigate threats, analyse security events and support incident response activities.\u003c/li\u003e \u003cli\u003eAct as a senior technical escalation point for complex security incidents and investigations.\u003c/li\u003e \u003cli\u003eProvide technical guidance, coaching and mentoring to Level 1 and Level 2 security analysts.\u003c/li\u003e \u003cli\u003eSupport the continuous improvement of security operations, incident response processes and technical capabilities.\u003c/li\u003e \u003cli\u003eAnalyse Indicators of Compromise (IOCs), attacker behaviours and relevant threat intelligence to support investigations.\u003c/li\u003e \u003cli\u003eIdentify opportunities to improve incident detection, investigation workflows and response effectiveness.\u003c/li\u003e \u003cli\u003eDocument investigation findings, response activities, recommendations and lessons learned.\u003c/li\u003e \u003cli\u003eCollaborate with internal technical teams and relevant stakeholders to coordinate incident management and strengthen the organisation\u0027s security posture.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat You\u0027ll Bring\u003c/strong\u003e \u003cul\u003e \u003cli\u003eSignificant experience within a Security Operations Centre (SOC), ideally operating at a Senior SOC Analyst, L2/L3 Analyst or Security Operations Lead level.\u003c/li\u003e \u003cli\u003eDemonstrated hands-on experience in Digital Forensics and Incident Response (DFIR).\u003c/li\u003e \u003cli\u003eStrong experience investigating, managing and responding to complex cyber security incidents, including containment, remediation and recovery.\u003c/li\u003e \u003cli\u003eStrong working knowledge of the Microsoft security ecosystem, ideally including Microsoft Sentinel, Microsoft Defender and Defender XDR.\u003c/li\u003e \u003cli\u003eExperience developing, implementing and maintaining technical incident response playbooks, runbooks and operational procedures.\u003c/li\u003e \u003cli\u003eAbility to independently investigate and manage security incidents, acting as a technical escalation point for the wider team.\u003c/li\u003e \u003cli\u003eDemonstrated experience mentoring, coaching or providing technical guidance to other security analysts.\u003c/li\u003e \u003cli\u003eStrong understanding of threat detection, threat intelligence, Indicators of Compromise (IOCs) and attacker Tactics, Techniques and Procedures (TTPs).\u003c/li\u003e \u003cli\u003eExperience identifying opportunities to improve security operations processes, incident response capability and operational maturity.\u003c/li\u003e \u003cli\u003eStrong analytical and problem-solving skills, with the ability to investigate complex technical issues and determine appropriate response actions.\u003c/li\u003e \u003cli\u003eExcellent communication and stakeholder engagement skills, with the ability to clearly articulate technical findings and recommendations.\u003c/li\u003e \u003cli\u003eExperience working within large, complex enterprise environments will be highly regarded.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhat\u0027s in It for You?\u003c/strong\u003e \u003cul\u003e \u003cli\u003eCompetitive contract rate of $110 per hour + superannuation.\u003c/li\u003e \u003cli\u003eInitial 6- 12 month contract opportunity.\u003c/li\u003e \u003cli\u003eBrisbane CBD location, conveniently based on Ann Street.\u003c/li\u003e \u003cli\u003eOpportunity to take ownership of complex DFIR and incident response activities.\u003c/li\u003e \u003cli\u003ePlay a key role in developing technical playbooks and improving incident response capability.\u003c/li\u003e \u003cli\u003eWork with Microsoft security technologies within an established cyber security environment.\u003c/li\u003e \u003cli\u003eOpportunity to provide technical leadership and mentor other security professionals.\u003c/li\u003e \u003cli\u003eMake a genuine contribution to strengthening the cyber security posture of a large organisation.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eHow to Apply\u003c/strong\u003e\u0026nbsp;\u003c/div\u003e \u003cdiv style=\"text-align:justify\"\u003eApplications are treated with absolute confidentiality. Click \u003cstrong\u003eAPPLY\u003c/strong\u003e or contact \u003cstrong\u003eClodagh at \u003c/strong\u003e\u003cstrong\u003eclodagh@decipherbureau.com\u003c/strong\u003e for an informal conversation about this opportunity. Equal opportunity and diversity are valued and encouraged.\u003c/div\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4485954\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "