Cyber Defense Analyst

Job Requisition ID: 41941 Lead cyber incident investigations while shaping how detection engineering, SIEM integration and AI-assisted operations evolve across Deloitte Australia. Tackle big issues like cyber, trust, resilience and digital transformation Mentoring, coaching and leadership programs to help you make an impact that matters Join Deloitte Australia's Cyber Defence team in a senior technical role where you'll help strengthen our incident response, detection capability and AI-augmented cyber operations. What will your typical day look like? This role is hands-on and technical, with a strong focus on leading security incident investigations. You'll conduct technical analysis, help scope incidents, support containment decisions, and provide clear status updates so leadership has accurate detail during active investigations. You'll also contribute to post-incident reviews, documenting root cause and remediation actions. A key part of the role is improving how incident response and SIEM capability work together. That includes translating investigation findings into new or improved detection content, advising on detections, playbooks and log coverage, and helping reduce manual effort while improving response speed. You'll also work across SOAR automation and continuous improvement activities that lift the team's overall effectiveness. Alongside the technical work, you'll engage day to day with Deloitte SIEM and global service partners, contributing to the AU Cyber Defence Strategy and AI Cyber Strategy. The role also involves applying and trialling AI and automation across triage, detection engineering and investigation support, while keeping runbooks, playbooks and operating procedures current and tested. You'll share your experience through informal coaching that helps less experienced team members grow. About the team Cyber Defence helps protect Deloitte Australia by strengthening how we detect, investigate and respond to cyber threats. The team works across incident response, SIEM engineering, detection improvement and operational readiness, partnering closely with internal stakeholders plus Deloitte SIEM and global service partners. It's a space where technical depth, practical problem solving and emerging approaches like AI-assisted operations all come together in work that directly supports the firm's resilience. Enough about us, let's talk about you You may have all or some of the following skills/experiences: Demonstrated experience investigating security incidents, including technical analysis and containment actions Strong technical background in SIEM platforms such as Microsoft Sentinel, Splunk or equivalent, including detection engineering and SOAR automation Experience working with managed security service providers or global SOC and service delivery models Strong written and verbal communication skills, with the ability to produce clear technical summaries for leadership use Familiarity with the MITRE ATT&CK framework and detection engineering methodologies Exposure to AI/ML-enabled security tooling, or experience applying automation and AI to security operations workflows Understanding of AI and Frontier AI risk concepts Certifications such as GCIH, GCFA, vendor-specific SIEM certifications, MITRE ATT&CK-based training, or AI security fundamentals Why Deloitte? At Deloitte, we focus our energy on interesting and impactful work. We're always learning, innovating and setting the standard; making a positive difference to our clients and our society. We put coaching at the heart of what we do, helping our people grow their careers in any direction - whether it be up, moving into something new, or even moving across the world. We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone's perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong. We value in-person connection with our clients and our colleagues. We offer several ways for you to work flexibly so that you can serve your clients, stay connected with your team, and manage your personal priorities. We help you live and work well. To support your personal and professional life, we offer a range of perks and benefits, including retail discounts, wellbeing leave, paid volunteering days, twelve flexible working options, market-leading parental leave and return to work support package. Next Steps Sound like the sort of role for you? Apply now, we'd love to hear from you! #linkedin #LI-Hybrid By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.