APS6 - Cyber Security Analyst, Affirmative Measures, First Nations

Australian-Department-of-Infrastructure-and-Regional-Development; Brisbane; Hybrid; AUD 100,000 - 118,000; Full time

Job summary

The Australian Department of Infrastructure and Regional Development is seeking an APS6 Cyber Security Analyst to join the Strategy, Architecture & Cyber Security team. The successful candidate will contribute to cyber resilience across a busy, multi-location department, balancing operational duties with strategic improvements.

You will work across Microsoft security platforms and enterprise technologies to monitor, investigate and respond to security events.

Qualifications

• Experience in cyber security operations and incident handling.
• Ability to monitor security events and triage threats.
• Proven capability to investigate security incidents and provide analysis.
• Ability to assess risks and advise on mitigations.
• Clear written and verbal communication with technical and non-technical stakeholders.
• Understanding of privacy and evidence-handling requirements.
• Ability to manage competing priorities and maintain records.
• Willingness to learn and contribute to security improvements.

Responsibilities

• Monitor security alerts, triage events and document outcomes.
• Analyze security and user activity information to support investigations.
• Provide practical, risk-based security advice to stakeholders.
• Design and improve preventative, detective and responsive controls.
• Use threat intelligence and vulnerability data to identify risks.
• Support insider risk monitoring and governance processes.
• Develop playbooks, procedures and automated solutions.
• Communicate cyber risks clearly and support security awareness efforts.

Skills

Cyber security operations

Security monitoring

Incident response

Technical investigations

Stakeholder communication

Risk management

Job description

Career Opportunities: APS6 - Cyber Security Analyst, Aff…(48319)

Requisition ID48319-Posted05/11/2026-$99,733-$118,084- Location of Position (4) -Ongoing-Full Time

APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security, Aff…

Title:

APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security, Aff…

Classification(s):

Employment Type:

Ongoing , Full Time

Business Division:

Branch / Section:

Strategy, Architecture & Cyber Security, Cyber Security

Location:

We want to recruit the best people to our department. Our roles support flexible work arrangements including the opportunity to work from one of our departmental offices and hybrid (mixture of office and home-based work).

These roles are located in Canberra, Brisbane, Sydney and Melbourne.

A merit pool may be formed and used to fill future similar vacancies in these locations and other locations within the same metropolitan area.

The filling of this vacancy is intended to constitute an affirmative measure under section 8(1) of the 'Racial Discrimination Act 1975'. This vacancy is only available to Aboriginal and/or Torres Strait people.

The opportunity we have available

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of stable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

What you will do

As a Cyber Security Analyst, you will contribute to the department’s day-to-day cyber security operations, assurance activities and ongoing capability uplift. You will work across Microsoft security platforms and other enterprise technologies to investigate security events, assess cyber risk, provide practical advice and help strengthen the department’s resilience.

The role requires sound judgement, attention to detail and the ability to explain complex security issues clearly to technical and non-technical stakeholders. You will manage competing priorities, maintain accurate records and esc rash significant risks when required.

Your key responsibilities will include:

• Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
• Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
• Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
• Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
• Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
• Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
• Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

The role offers opportunities to deepen technical expertise and contribute to the continued improvement of the department’s cyber security capability.

Inherent requirements for the role

The successful candidate will be able to demonstrate their capability against the APS6 Work level standards and possess the following core capabilities:

• Experience in cyber security operations, technical assurance, investigations or a related discipline.
• Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
• Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
• Analyse complex information from a variety of sources, identify risks and trends, and exercise sound judgement to support evidence-based decisions and recommendations.
• Manage competing priorities in a dynamic environment, delivering quality outcomes while maintaining attention to detail and appropriate risk management practices.
• Demonstrate a growth mindset, including a willingness to learn, adapt and continuously develop technical and professional capability, while contributing to a culture of learning and improvement.
• Identify opportunities to improve security controls, processes and services, and contribute to the development of more efficient, consistent and sustainable ways of working.
• Contribute to a positive and professional team culture through collaboration, accountability, integrity and a commitment to high-quality outcomes.
• Handle sensitive information appropriately and maintain accurate records in accordance with privacy, security, procedural fairness and evidence-handling requirements.

The Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is committed to supporting the employment and