Location: ACT QLD VIC WA
LH01723
Security Clearance: Australian Citizen must have NV1 clearance or higher
ASD is seeking candidates who hold active NV1 or TSPV security clearances. Please clearly indicate the level held within your responses.
ICT Security Engineers provide operational and system security management and administrative services.
Job Description:
Security Engineers will be highly organised dynamic outcome orientated individual with excellent communication skills. They will provide operational and system security management and administrative services for complex security issues. They will provide advice and guidance on complex IT system security issues. They will work with business stakeholders project managers systems architects and other groups as required to define and support solution delivery.
Job Duties and Responsibilities may include:
- Work as a key contributing member of a highly diverse and fast paced team supporting existing infrastructure and users.
- Conduct capability and concept development in the context of technical security
- Undertake/Support security design and implementation activities.
- Deliver verification and validation activities including conducting security certification/accreditation and support activities.
- Develop a schedule of work and report on progress.
Technical Skills:
- Bachelor s degree in Information Technology or related field.
- At least 5 years experience as a security engineer or similar role.
- Experience in identifying and/or applying security controls.
- Experience with security controls in cloud computing systems.
Desirable: Experience with using and administering ICT security applications such as a SIEM (e.g. Arcsight Splunk) vulnerability management tools or endpoint protection tools.
Requirements
Technical Skills:
- Bachelor s degree in Information Technology or related field.
- At least 5 years experience as a security engineer or similar role.
- Experience in identifying and/or applying security controls.
- Experience with security controls in cloud computing systems.
Essential criteria
1. SCAD 5 Security operations: Level 5 (SFIA) Monitors the application and compliance of security operations procedures. Reviews actual or potential security breaches and vulnerabilities and ensures that they are promptly and thoroughly investigated. Recommends actions and appropriate control improvements. Ensures that security records are accurate and complete and that requests for support are dealt with according to agreed procedures. Contributes to the creation and maintenance of policy standards procedures and documentation for security.
2. SCTY 5 Information security: Level 5 (SFIA) Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Contributes to development of information security policy standards and guidelines. Obtains and acts on vulnerability information and conducts security risk assessments business impact analysis and accreditation on complex information systems. Investigates major breaches of security and recommends appropriate control improvements. Develops new architectures that mitigate the risks posed by new technologies and business practices.
3. INAS 5 Information assurance: Level 5 (SFIA) Interprets information assurance and security policies and applies these to manage risks. Provides advice and guidance to ensure adoption of and adherence to information assurance architectures strategies policies standards and guidelines. Plans organises and conducts information assurance and accreditation of complex domains areas crossfunctional areas and across the supply chain. Contributes to the development of policies standards and guidelines.
Desirable criteria
1. PBMG 4 Problem management: Level 4 (SFIA) Initiates and monitors actions to investigate and resolve problems in systems processes and services. Determines problem fixes and remedies. Collaborates with others to implemented agreed remedies and preventative measures. Supports analysis of patterns and trends to improve problem management processes.
2. Our ideal candidates will bring the following attributes: Strong written and verbal communication skills; Desire to be accountable for their actions; Strong stakeholder management skills; Demonstrate leadership behaviours; Willing to challenge the traditional ways of doing business; Thrive in dynamic environments and comfortable with ambiguity; Outcomefocused mindset; and Adaptability resilience flexibility and teamwork including regionally dispersed teams if applicable. Please provide a brief explanation of your experience covering these attributes.
(Guide 300 to 400 words.)
Essential criteria: 1. ITOP 5 - Provides technical leadership to optimise the performance of IT infrastructure. Investigates and manages the adoption of tools, techniques and processes (including automation) for the management of systems and services. Oversees the planning, installation, maintenance and acceptance of new and updated infrastructure components and infrastructure-based services. Aligns to service expectations, security requirements and other quality standards. Ensures that operational procedures and documentation are fit for purpose and kept up to date. Ensures that operational issues are identified, recorded, monitored and resolved. Provides appropriate status and other reports to specialists, users and managers. 2. DESN 5 - Designs large or complex systems and undertakes impact analysis on major design options and trade-offs. Ensures that the system design balances functional and non-functional requirements. Reviews systems designs and ensures that appropriate methods, tools and techniques are applied effectively. Makes recommendations and assesses and manages associated risks. Adopts and adapts system design methods, tools and techniques. Contributes to development of system design policies, standards and selection of architecture components. 3. HSIN 5 - Takes responsibility for installation and/or decommissioning projects. Provides effective team leadership, including information flow to and from the customer during project work. Develops and implements quality plans and method statements. Monitors the effectiveness of installations and ensures that appropriate recommendations for change are made. 4. SINT 5 - Plans and drives activities to develop organisational systems integration and build capabilities including automation and continuous integration. Identifies, evaluates and manages the adoption of tools, techniques and processes to create a robust integration framework. Provides authoritative advice and guidance on any aspect of systems integration. Leads integration work in line with the agreed system and service design. Assesses risks and takes preventative action. Measures and monitors applications of standards. Contributes to the development of organisational policies, standards, and guidelines for systems integration. Desirable criteria 1. Our ideal candidates will bring the following attributes: Strong written and verbal communication skills; Desire to be accountable for their actions; Strong stakeholder management skills; Demonstrate leadership behaviours; Willing to challenge the traditional ways of doing business; Thrive in dynamic environments and comfortable with ambiguity; Outcome-focused mindset; and Adaptability, resilience, flexibility and teamwork, including regionally dispersed teams, if applicable. Please provide a brief explanation of your experience covering these attributes. (Guide 300 to 400 words.)