Description

You will support detection and incident response coordination to protect critical electoral systems from foreign and domestic threats.

Responsibilities

• Collect and analyze cyber security data to identify the root cause of attacks against ICT environments.
• Implement security actions to counter active attacks and restore system operations.
• Maintain cyber security monitoring and analysis toolsets.
• Lead the build of cyber security architecture through consultation with internal ICT teams.
• Conduct threat hunting exercises and provide intelligence to the operations team.
• Develop standard operating procedures for cyber security incident response.

Required Skills

• Experience using Sentinel or a similar SIEM solution.
• In-depth familiarity with the Australian Government Information Security Manual (ISM).
• Extensive experience in Windows, Linux, networking, and system administration.
• Experience with security technologies including endpoint protection, firewalls, and IDS/IPS.
• Hands-on experience with cloud security services in Azure or AWS.
• Proven experience in cyber incident response and monitoring processes.
• Australian citizenship and ability to obtain Negative Vetting Level 1 clearance.
• Ability to work shifts as required for incident response and electoral events.

Preferred Skills

• Experience performing cyber security monitoring within or for Federal government entities.

Key Skills

Education

Any Graduate