APS6 - Cyber Security Analyst, Strategy, Architecture & Cyber Security

Australian-Department-of-Infrastructure-and-Regional-Development; Brisbane; Hybrid; AUD 100,000 - 118,000; Full time

Benefits offered by this job

Study Assistance Program

Professional Coaching Scheme

Flexible working opportunities

Job summary

The Australian Department of Infrastructure and Regional Development is seeking an APS6 Cyber Security Analyst within the Strategy, Architecture & Cyber Security group. The role focuses on cyber security operations, incident response, assurance, monitoring and capability uplift across enterprise technologies, with emphasis on strengthening resilience and providing practical risk-based guidance.

Based in a flexible environment with hybrid work options, the role offers opportunities to contribute

Qualifications

• Experience in cyber security operations or related discipline.
• Ability to communicate effectively with technical and non-technical stakeholders.

Responsibilities

• Security monitoring, incident response, and documentation of findings.
• Technical investigations and activity reviews to support cyber incidents and insider risk matters.
• Provide risk-based security advice to stakeholders and support application and system changes.
• Help design and improve security controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management to identify risks and propose actions.
• Contribute to insider risk monitoring, governance and reporting processes.
• Develop playbooks, procedures, automation and repeatable workflows to improve resilience.
• Engage with stakeholders to communicate cyber risks and support security awareness.

Job description

APS6 - Cyber Security Analyst, Strategy, Architecture & Cyber Security (48277)

Requisition ID48277-Posted05/11/2026-$99,733-$118,084- Location of Position (4) -Ongoing-Full Time

APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security

Title:

APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security

Classification(s):

Employment Type:

Ongoing , Full Time

Business Division:

Branch / Section:

Strategy, Architecture & Cyber Security, Cyber Security

Location:

We want to recruit the best people to our department. Our roles support flexible work arrangements including the opportunity to work from one of our departmental offices and hybrid (mixture of office and home-based work).

These roles are located in Canberra, Brisbane, Sydney and Melbourne.

A merit pool may be formed and used to fill future similar vacancies in these locations and other locations within the same metropolitan area.

We actively seek to reflect the diversity of the Australian community in our workforce. We encourage applications from Aboriginal and Torres Strait Islanderpeople, people with disability and/or who are neurodivergent, people from culturally and linguistically diverse backgrounds and members of the LGBTQIA+ community, including people of all genders and gender identities. We uphold gender equality as a core organisational value. If you’re interested in the role but feel uncertain, we still encourage you to apply if you feel your passions, transferable skills and valuable experience align with this position.

The opportunity we have available

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of stable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

What you will do

As a Cyber Security Analyst, you will contribute to the department’s day-to-day cyber security operations, assurance activities and ongoing capability uplift. You will work across Microsoft security platforms and other enterprise technologies to investigate security events, assess cyber risk, provide practical advice and help strengthen the department’s resilience.

The role requires sound judgement, attention to detail and the ability to explain complex security issues clearly to technical and non-technical stakeholders. You will manage competing priorities, maintain accurate records and escape significant risks when required.

Your key responsibilities will include:

• Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
• Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
• Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
• Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
• Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
• Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
• Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

The role offers opportunities to deepen technical expertise and contribute to the continued improvement of the department’s cyber security capability.

Inherent requirements for the role

The successful candidate will be able to demonstrate their capability against the APS6 Work level standards and possess the following core capabilities:

• Experience in cyber security operations, technical assurance, investigations or a related discipline.
• Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
• Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
• Analyse complex information from a variety of sources, identify risks and trends, and exercise sound judgement to support evidence-based decisions and recommendations.
• Manage competing priorities in a dynamic environment, delivering quality outcomes while maintaining attention to detail and appropriate risk management practices.
• Demonstrate a growth mindset, including a willingness to learn, adapt and continuously develop technical and professional capability, while contributing to a culture of learning and improvement.
• Identify opportunities to improve security controls, processes and services, and contribute to the development of more efficient, consistent and sustainable ways of working.
• Contribute to a positive and professional team culture through collaboration, accountability, integrity and a commitment to high-quality outcomes.
• Handle sensitive information appropriately and maintain accurate records in accordance with privacy, security, procedural fairness and evidence-handling requirements.

The Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is committed to supporting the employment and career development of people with disability. Our participation in APS RecruitAbility means we will progress an applicant with disability to a further stage in the recruitment process, where they opt into RecruitAbility and meet the minimum requirements for the vacancy.

The RecruitAbility minimum requirements are listed above under ‘inherent requirements for the role’.

You will be asked to indicate if you wish to opt into RecruitAbility in the application form. You must tick the 'opt in' box to participate in RecruitAbility. Simply declaring that you have a disability will not automatically include you.

We provide reasonable adjustments such as access, equipment or other practical support at relevant stages of the recruitment process. Please advise in the application form or get in touch with the contact officer if you need any adjustments made.

Experience with Microsoft security technologies such as Defender, Entra, Sentinel or Purview will be highly regarded.

Cultural capability requirement

The department believes every role contributes to cultural safety and that building staff cultural capability helps us deliver better policies, programs and services for First Nations people and the broader Australian community. Candidates will be required to demonstrate their willingness to develop their cultural capability as part of the assessment process. In making it a requirement across all roles in our department, we are taking a practical step in delivering our commitments under the Our Stories on Country Agreement and the Diversity, Equity and Inclusion Strategy 2025–28 .

As an APS6 you will be expected to:

• Consider the cultural context and implications of work area outcomes.
• Engage respectfully with Aboriginal and/or Torres Strait Islander stakeholders, building trusted relationships.
• Communicate respectfully and seeks appropriate cultural input to inform decisions.

What else can we offer?

We are dedicated to fostering personal and professional development, empowering individuals to set goals, acquire new skills, and cultivate unique qualities that define who they are. We believe that this not only leads to a more fulfilling and happier life but also enhances the overall quality of our work. Some of the benefits we offer include:

• Access to our study Assistance Program that provides paid leave and financial support for you to undertake courses of study that contribute to the improvements of your professional skills and knowledge relevant to our work and broader Australian Public Service.
• Through our investment in learning and development opportunities, and a positive performance culture, we provide diverse career pathways for our people to enable their mobility and adapt in a rapidly changing world.
• Networking opportunities across the department and wider APS through daily engagement with HR working groups and internal and external stakeholders.
• Improve your leadership skills, through the department’s Professional Coaching Scheme and tailored leadership opportunities for staff members.
• Flexible working opportunities, including part-time hours, home based work and job sharing.
• We offer generous leave entitlements of 20 days personal circumstances leave per year, with one month’s accrual of leave credited on commencement and 150 hours of paid annual leave (based on a full-time employee), plus a range of other miscellaneous leave options to support you.

Join our department and embark on a journey of growth, fulfillment, and well-being. Experience personal and professional development, prioritise your health, and be part of a vibrant and positive culture that empowers individuals and drives exceptional performance.

Eligibility requirements

Employment with the Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is subject to conditions prescribed within the Public Service Act 1999 including:

• Citizenship: candidates must be an Australian citizen at the time of submitting your application.
• Health Assessment: The preferred candidate may be required to undergo a medical examination conducted by the department’s preferred medical provider.
• Security Clearance: The successful candidate must be able to obtain and/or maintain a security clearance at Negative Vetting 1 Level. You must be willing to disclose all relevant and required information. You must have lived in Australia, or have a checkable background, for at least the preceding five years for Baseline Vetting clearances. More information on the security clearance vetting process is available on the Australian Government Security Vetting Agency (AGSVA) website .
• Police check: The successful candidate must complete an Australian Federal Police criminal history check.
• Integrity and Performance check: The successful candidate must satisfy the requirements in an Integrity and Performance check which is completed by your most recent employer.

Timeline and assessment

A selection panel will be established to assess your suitability against the advertised role.

If a merit pool is established, it will be valid for 18 months from date it first appeared in the APS Gazette.

Applications open: 6 November 2026

Application shortlisting: 27 November 2026

Further assessments: 4 December 2026

Offers and announcements: 21 December 2026

The above is indicative only, please reach out to the contact person if you have any questions on the recruitment process or timeframes.

Your application will be assessed against the inherent requirements of the role , the Work level standards and in comparison, to other candidates who applied . Once the entire applicant pool has been assessed, the panel will create a shortlist of applicants. If your application is shortlisted, you may be asked to undertake further assessment, this may include work sample testing, interviews and reference checks.