Senior Cyber Threat Hunt and Emulation Specialist

About Us

CEA is an Australian Commonwealth company that designs, develops, manufactures and sustains advanced active phased array radar systems. The company’s design principles and commitment to investment in research and development ensures innovative thinking, technological skill, and quality fabrication.

Our programs include the ANZAC and Hunter Class frigates and air defence applications for Army and Air Force, and Range applications. Through our longstanding and ongoing collaboration with Defence, CEA Technologies has undertaken research and development into all aspects of active electronically scanned array technologies. This has resulted in the creation of a highly modular and scalable product suite, which have become integral to a wide range of critical Defence capabilities.

The Position
In this role, you will be at the forefront of our defensive security operations, leading advanced security monitoring, threat detection, hunting and emulation, and providing technical leadership over incident response activities within the Security Operations Centre (SOC). This position is strategically important to our organisation's ability to identify, analyse and respond to cyber threats and vulnerabilities, while continuously improving detection capabilities and response processes.

Key Responsibilities:

• Lead the investigation and response to high-severity and complex security incidents, ensuring effective containment, eradication and recovery.

• Act as the primary escalation point for level 1 and 2 SOC analysts, providing guidance and technical expertise on advanced threats, and techniques.

• Develop, tune, optimise detection use cases, correlation rules, and alerting mechanisms across security tools including SIEM, and EDR platforms.

• Conduct proactive threat hunting and emulation activities to identify previously undetected threats and adversary behaviours within the environment.

• Analyse and produce threat intelligence and integrate relevant insights into detection and response strategies

• Drive continuous improvement of incident response processes, playbooks, and SOC procedures, while mentoring junior analysts and uplifting team capability

Our Benefits

• Six weeks of paid annual leave per year

• Superannuation of 14.0%

• Free car parking

• Paid parental, compassionate, defence reserve & voluntary emergency services leave

• Employee assistance and wellbeing programs

• Health insurance for defence supporters and their families

• Salary packaging for novated leasing

• Opportunities for professional growth and development

Our Ideal Candidate

• Minimum 8-10 years’ experience in a cyber role, with significant demonstrable experience in Security Operations Centre (SOC) environments

• Bachelor degree and/or relevant industry certifications.

• Strong expertise in threat detection, incident response, and digital forensics across highly regulated enterprise or government environments.

• Deep understanding of attacker tactics, techniques and procedures aligned to frameworks such as MITRE ATT&CK

• Advanced analytical and problem-solving skills, with the ability to triage and investigate complex security incidents with little to no oversight.

• Demonstrated experience in threat hunting and developing detection use cases and correlation rules

• Strong knowledge of network protocols, operating systems including Windows and Linux.

• Strong scripting or automation capability (e.g. Python, PowerShell) to support investigation and response activities

Eligibility

• An Australian Citizen;

• Eligible to obtain and maintain an AGSVA clearance – Positive Vetting

• ITAR – This position requires employees to access equipment and data that is subject to U.S International Traffic and Arms Regulation (ITAR). As such, applicants must disclose the following information at the time of application.

  • Place of Birth

  • Countries of current or past citizenship (including any dual citizenship or nationality) and residence,

  • Countries of issue for current and past passports and

  • Other information related to their nationality for security and ITAR compliance purposes.

To find out more about our Citizenship and Nationality requirements, please visit www.cea.com.au

How to apply

Click on the 'Apply Now' button below. Please include a current copy of your resume and complete the screening questions. Applications without these elements will not be considered.

CEA encourages the submissions of early applications as we may review, short-list and/or conduct interviews for this role prior to the closing date.

Diversity, Equality and Inclusion at CEA

CEA is committed to fostering a diverse, equitable and inclusive environment. As an Equal Opportunity Employer, we strive to create a culture where all employees are respected and empowered to contribute positively to our organisation, regardless of their cultural background, age, gender identity, neurodiversity, disability, family and carer commitments, religion or sexuality. We welcome applications from veterans, those returning from a career break, people with disabilities and those who identify as Aboriginal and Torres Strait Islander.

For information on Equal Employment Opportunity & Privacy or Security & Citizenship requirements please visit www.cea.com.au/opportunities-at-cea

Should you require any adjustments throughout the recruitment process, please let us know. You can also email ***********@cea.com.au for a confidential discussion.

Unsolicited resumes from recruitment agencies will not be accepted