Senior Cyber Analyst
Had enough of working in an MSSP, passing the best work onto someone else? Or maybe you’re in a tiny cyber team, stretched... more info
Location : ACT, QLD, VIC, WA Work Arrangements : Onsite Security Clearance : Must have NV2 or above Job Description: Cyber Analysts / Engineers provide operational and cyber system security management and administrative services. Cyber Analysts will provide ICT security advice and assistance to government, including policy creation, project advice and assistance, and research. They need to understand cyber intrusion activities then use their research skills to provide reporting on threat modelling and intelligence. They will be organised, dynamic, outcome-orientated individuals with strong communication skills. Cyber Security Engineers will implement, manage and retire the infrastructure (including physical, virtual, networking and cloud infrastructure) that supports digital services. Job Duties and Responsibilities may include: Analysts: Prepare and deliver complex briefs and cyber intelligence reporting related to the Australian Signals Directorate and national security issues. Identify and undertake complex research and analysis of relevant cyber threat actors to provide situational awareness on the current and emerging threat to the Australian Signals Directorate. Analyse identified cyber threat event data and fuse with all-source intelligence in order to identify, model, and track threat actors targeting the Australian Signals Directorate, and recommend any required actions. Understand and use analytical tools and techniques to develop cyber threat activity-related assessments. Engineers: Coordinate activities and participates in the design, development, testing, implementation, documentation, support, security, maintenance or enhancement of signals intelligence systems. Utilise contemporary knowledge of the Information Communication Technology profession to create innovative technical solutions, to support the signals intelligence function. Apply an understanding of the signals intelligence function through participation in collaborative analysis activities. Design and implement solutions to issues impacting on the signals intelligence function. Requirements Technical skills required: (Preferred) Holds a Bachelor of Computer Science, Computer Systems Engineering or an Intelligence related discipline or equivalent qualification/work experience in either of these fields: Penetration Testing, Host and/or network Forensics, or Intelligence Analysis. At least 3 years’ experience as a Cyber Analyst / Engineer or similar role. Understanding and experience in the application of the Essential 8. Experience with network security technologies from vendors such as Palo Alto, Cisco, Sourcefire, FireEye, Blue Coat, Gigamon and Ixia. Experience installing and configuring COTS network security devices such as Next Generation Firewalls (NGFW), Intrusion Detection Systems (IDS), NetFlow and Network Visibility appliances. Essential criteria: F1:4 - Intrusion Detection and Analysis: Level 4 (CIISEC) Analysts: Operates as a member of an intrusion and analysis team without close supervision. Appropriate and relevant certifications include CREST Registered Intrusion Analyst. B1:4 - Threat Intelligence, Assessment and Threat Modelling: Level 4 (CIISEC) Analysts: Undertakes routine threat intelligence/modelling tasks or threat assessments without close supervision. Undertakes complex threat intelligence tasks or threat assessments under supervision. Appropriate and relevant certifications include CREST Registered Threat Intelligence Analyst. I1:4 - Research: Level 4 (CIISEC) Analysts: Builds on and refines appropriate outline ideas for the evaluation, development, demonstration and implementation of research. Contributes to research goals and funding proposals. Collects and analyses qualitative and quantitative data as required. Contributes to research plans and identifies appropriate opportunities for publication and dissemination of research findings. Makes an active contribution to research communities. Presents papers at conferences, contributes significant sections of publication-quality material, and presents reports to clients. DESN 4 - Systems design: Level 4 (SFIA) Engineers: Designs system components using appropriate modelling techniques following agreed architectures, design standards, patterns and methodology. Identifies and evaluates alternative design options and trade-offs. Creates multiple design views to address the concerns of the different stakeholders and to handle functional and non-functional requirements. Models, simulates or prototypes the behaviour of proposed system components to enable approval by stakeholders. Produces detailed design specifications to form the basis for the construction of systems. Reviews, verifies and improves own designs against specifications. SCTY 4 - Information security: Level 4 (SFIA) Engineers: Maintains operational security processes and checks that all requests for support are dealt with according to agreed procedures. Provides advice on defining access rights and the application and operation of elementary physical, procedural and technical security controls. Investigates security breaches in accordance with established procedures and recommends required actions. Provides support and checks that corrective actions are implemented. HSIN 4 - Systems installation and removal: Level 4 (SFIA) Engineers: Undertakes or supervises complex installations and de-installations of systems or components, including handover to the client. Develops procedures and standards for installation and handover to maintain and improve the installation service. Schedules installation work around client priorities and resource availability. Ensures adherence to established safety and quality procedures. Desirable criteria: We are seeking candidates with an NV2 or TSPV security clearance. Our ideal candidates will bring the following attributes to a Senior - APS6 equivalent role: Strong written and verbal communication skills; Desire to be accountable for their actions; Strong stakeholder management skills; Demonstrate leadership behaviours; Willing to challenge the traditional ways of doing business; Thrive in dynamic environments and comfortable with ambiguity; Outcome-focused mindset; and Adaptability, resilience, flexibility and teamwork, including regionally dispersed teams, if applicable. Please provide a brief explanation of your experience covering these attributes. (Guide – 300 to 400 words.) #J-18808-Ljbffr
Had enough of working in an MSSP, passing the best work onto someone else? Or maybe you’re in a tiny cyber team, stretched... more info
Contact: Arpan Brahmbhatt, Manager Cyber Incident Response or 0409 004 893 About us The Department of Government Services... more info
APS6 - Senior Policy Officer - SDL Accounting Non-ongoing, initial 12 months with possibility of extension Join us to shape... more info