Threat Intelligence and Hunter Specialist

We bring the energy!

Through purpose and people - not just through the infrastructure we operate, but through the way we show up for each other, our customers and our communities. The future of energy is in our hands. Let’s shape it together.

Are you ready to shape the future of energy?

This is an exciting opportunity to work in critical infrastructure and help shape and mature AusNet’s Threat Intelligence and Threat Hunting capability. You will join an organisation experiencing significant growth and transformation, creating opportunities to make a meaningful impact, build strong industry connections and broaden your cyber security experience.

We are looking for a Threat Intelligence and Hunting Specialist to lead AusNet’s Threat Intelligence and Threat Hunting capability, proactively identifying emerging cyber threats, adversary behaviours and indicators of compromise to strengthen the organisation’s cyber resilience.

The role develops actionable intelligence, conducts hypothesis-driven threat hunts and continuously improves detection capabilities across IT, OT and cloud environments. Working closely with other cyber security teams, the role provides expert technical advice, enhances detection effectiveness and ensures the organisation remains prepared to identify and respond to evolving cyber threats.

What you’ll be doing in this role:

• Lead the development and continuous improvement of AusNet’s Threat Intelligence and Threat Hunting capability, ensuring activities align with the organisation’s cyber security strategy and evolving threat landscape.

• Collect, analyse and disseminate actionable intelligence to support proactive defence, risk informed decision-making and incident response across IT, OT and cloud environments.

• Plan and execute intelligence-led hypothesis-driven threat hunting activities to identify malicious activity, advanced threats and indicators of compromise that may evade traditional detection mechanisms.

• Develop and maintain threat hunting methodologies, playbooks, use cases and detection content, leveraging industry frameworks such as MITRE ATT&CK and current adversary tactics, techniques and procedures.

• Partner with the Cyber Defence, Offensive Security, Network Security and OT Security teams to enhance detection capabilities, validate security controls and strengthen the organisation’s cyber resilience

• Monitor emerging cyber threats, vulnerabilities and threat actor activity, assessing their potential impact on the organisation and providing timely recommendations to stakeholders

• Produce high-quality threat intel reporting and briefings for technical teams and senior stakeholders, translating complex technical information into actionable insights

• Support cyber incident response and investigations by providing threat intelligence, threat actor context and technical analysis to improve response effectiveness

• Develop and maintain relationships with external intelligence providers, industry peers and government agencies to enhance situational awareness and intelligence sharing

• Contribute to the continuous improvement of cyber security processes, technologies and operational maturity through innovation, knowledge sharing and adoption of industry best practices.

You don’t need to check every box, however we’re looking for a good combination of:

• Demonstrated cyber security experience, including at least three years in cyber threat intelligence, threat hunting or a closely related discipline.

• Strong knowledge of cyber threat intelligence, adversary tactics, techniques and procedures and intelligence lifecycle methodologies

• Experience conducting hypothesis-driven threat hunting using endpoint, network, cloud and security telemetry

• Strong understanding of MITRE ATT&CK, Cyber Kill Chain, Diamond Model and cyber threat intelligence

• Experience using SIEM, EDR/XDR, cloud security, network detection, identity, vulnerability intelligence, and threat intelligence platforms to conduct investigations, hunting, enrichment, and detection development.

• Ability to analyse malware, indicators of compromise and threat actor activity to produce actionable intelligence and technical recommendations.

• Experience tracking and hunting for advanced persistent threat activity and supporting the response to sophisticated threat actors.

• Ability to communicate threat actor behaviours, intent, capabilities and associated risks to technical and non-technical audiences

• Experience in developing and maintaining threat actor dossiers.

• Relevant industry certifications such as GCTI, GCFA, GCIH, GNFA, CTIA or equivalent.

In this role you’ll need to demonstrate some key attributes:

• Critical thinker with a methodical, evidence-based approach to threat intelligence, threat hunting and cyber security investigations.

• Results-oriented with a focus on achieving measurable business outcomes.

• Adaptable and resilient in a fast-paced, ever-changing digital landscape.

• Confidence to provide informed technical challenge while remaining collaborative and open to different perspectives.

• Ability to build and maintain positive relationships with business units, service providers and technology partners. Provides technical leadership, mentoring, and knowledge sharing across Cyber Defence and related teams, contributing to a collaborative, high-performing cyber security culture.

• Promote and foster collaborative team and stakeholder relationships based on mutual trust, integrity, accountability and inclusion.

• Be a role model. Deliver success through empowerment and accountability by role modelling and coaching

The AusNet experience is all about…

• Growing your impact: We’ll support you to build your career through real opportunities and strong connections.

• Solving some of the most complex energy challenges of our time: We love unpacking complex challenges in clever ways and looking at things differently.

• Building an energy future to be proud of: We’re a trusted leader, with deep expertise, driven to do what’s right for our communities and customers.

We’re committed to building an inclusive culture and a diverse workforce. We believe different perspectives are essential to our success, and we encourage all applicants to apply. If you need any adjustments during the recruitment process, we're happy to discuss how we can support you.

At AusNet, we bring the energy! Ready to make your impact? Apply now!

We will not be engaging with Recruitment agencies for this role, so please apply directly.