Multiple Senior Security Engineer

Job Description

Location: ACT, QLD, VIC, WASecurity Clearance: Australian Citizen must be NV1 or higherASD is seeking candidates who hold active NV1 or TSPV security clearances. Please clearly indicate the level held within your responses. ICT Security Engineers provide operational and system security management and administrative services. Job Duties and Responsibilities may include: Manage and develop ICT system security activities Achieve an Authority to Operate (ATO) Develop a System Security Plan (SSP) Assess compliance with ICT security requirements Lead the application and compliance of security operations procedures and review information systems for actual or potential security controls to achieve ATO Negotiate with ICT engineers and ICT Security in the development and approval of Concept of Operations, SSPs and Executive Briefs Technical Skills: At least 3 years’ experience as a security engineer or similar role. Experience in identifying and/or applying security controls. Experience with security controls in cloud computing systems. Good knowledge of information security principles, practices and technologies. Demonstrable experience in ICT security activities with a focus on Linux and Windows operating systems. High level of knowledge on ICT security threat and risk assessments and the ability to recommend mitigation/remediation strategies. Experience in production of complex technical documentation. Desirable: Bachelor’s degree in Information Technology or related field. Essential criteria: SCAD 3 - Security operations: Level 3 (SFIA) Investigates minor security breaches in accordance with established procedures. Assists users in defining their access rights and privileges. Performs non-standard operational security tasks. Resolves security events and operational security issues. SCAD 4 - Security operations: Level 4 (SFIA) Maintains operational security processes and checks that all requests for support are dealt with according to agreed procedures. Provides advice on defining access rights and the application and operation of elementary physical, procedural and technical security controls. Investigates security breaches in accordance with established procedures and recommends required actions. Provides support and checks that corrective actions are implemented. SCTY 4 - Information security: Level 4 (SFIA) Provides guidance on the application and operation of elementary physical, procedural and technical security controls. Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems. Identifies risks that arise from potential technical solution architectures. Designs alternate solutions or countermeasures and ensures they mitigate identified risks. Investigates suspected attacks and supports security incident management. INAS 4 - Information assurance: Level 4 (SFIA) Performs technical assessments and/or accreditation of complex or higher-risk information systems. Identifies risk mitigation measures required in addition to the standard organisation or domain measures. Establishes the requirement for accreditation evidence from delivery partners and communicates accreditation requirements to stakeholders. Contributes to planning and organisation of information assurance and accreditation activities. Contributes to development of and implementation of information assurance processes. Desirable criteria: PBMG 3 - Problem management: Level 3 (SFIA) Investigates problems in systems, processes and services. Assists with the implementation of agreed remedies and preventative measures. #J-18808-Ljbffr