APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security, Affirmative Measures, First Nations

Australian Department of Infrastructure, Transport, Regional Development, Communications, Sport and; Sydney; On-site; AUD 90,000 - 115,000; Full time

Job summary

Australian Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is seeking an APS6 Cyber Security Analyst in the Cyber Security Team, Strategy, Architecture & Cyber Security, based in Sydney. The role focuses on cyber security operations, incident response, assurance and capability uplift across Microsoft security platforms and enterprise technologies.

You will investigate security events, assess cyber risk, provide practical advice and strengthen

Qualifications

• Experience in cyber security operations and incident response.
• Ability to communicate complex security issues to technical and non-technical stakeholders.
• Ability to analyze information from multiple sources to identify risks and trends.

Responsibilities

• Monitor, triage and investigate security alerts and identity-risk detections.
• Conduct technical investigations and activity reviews to support incidents and inquiries.
• Assess applications, systems and changes for security risks and controls.
• Assist in designing and improving security controls across cloud, identity, endpoint and network environments.
• Utilize threat intelligence and vulnerability information to identify risks and recommend actions.
• Support insider risk monitoring, case management and governance processes.
• Develop playbooks, procedures and automation to improve efficiency and resilience.
• Engage with stakeholders to communicate cyber risks clearly and effectively.

Skills

Cyber security operations

Incident response

Threat detection

Stakeholder communication

Documentation

Tools

Microsoft Defender

Entra

Sentinel

Purview

Job description

APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security, Affi…

Australian Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts – Sydney NSW

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of stable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

The opportunity we have available

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of stable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

The key duties of the position include:

What you will do

As a Cyber Security Analyst, you will contribute to the department’s day-to-day cyber security operations, assurance activities and ongoing capability uplift. You will work across Microsoft security platforms and other enterprise technologies to investigate security events, assess cyber risk, provide practical advice and help strengthen the department’s resilience.

The role requires sound judgement, attention to detail and the ability to explain complex security issues clearly to technical and non-technical stakeholders. You will manage competing priorities, maintain accurate records and elevate significant risks when required.

Your key responsibilities will include:

• Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
• Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
• Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
• Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
• Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
• Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
• Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

The role offers opportunities to deepen technical expertise and contribute to the continued improvement of the department’s cyber security capability.

Inherent requirements for the role

The successful candidate will be able to demonstrate their capability against the APS6 Work level standards and possess the following core capabilities:

• Experience in cyber security operations, technical assurance, investigations or a related discipline.
• Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
• Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
• Analyse complex information from a variety of sources, identify risks and trends, and exercise sound judgement to support evidence-based decisions and recommendations.
• Manage competing priorities in a dynamic environment, delivering quality outcomes while maintaining attention to detail and appropriate risk management practices.
• Demonstrate a growth mindset, including a willingness to learn, adapt and continuously develop technical and professional capability, while contributing to a culture of learning and improvement.
• Identify opportunities to improve security controls, processes and services, and contribute to the development of more efficient, consistent and sustainable ways of working.
• Contribute to a positive and professional team culture through collaboration, accountability, integrity and a commitment to high-quality outcomes.
• Handle sensitive information appropriately and maintain accurate records in accordance with privacy, security, procedural fairness and evidence-handling requirements.

Desirable requirements

Experience with Microsoft security technologies such as Defender, Entra, Sentinel or Purview will be highly regarded.

Cultural capability requirement

The department believes every role contributes to cultural safety and that building staff cultural capability helps us deliver better policies, programs and services for First Nations people and the broader Australian community. Candidates will be required to demonstrate their willingness to develop their cultural capability as part of the assessment process. In making it a requirement across all roles in our department, we are taking a practical step in delivering our commitments under the Our Stories on Country Agreement and the Diversity, Equity and Inclusion Strategy 2025–28.

• Consider the cultural context and implications of work area outcomes.
• Engage respectfully with Aboriginal and/or Torres Strait Islander stakeholders, building trusted relationships.
• Communicate respectfully and seeks appropriate cultural input to inform decisions.

Eligibility

Eligibility requirements

This is an APS6 – Cyber Security Analyst, Strategy, Architecture & Cyber Security, Affi…

• be an Aboriginal person and/or a Torres Strait Islander person
• identify as an Aboriginal person and/or a Torres Strait Islander person, and
• be accepted by their community as being an Aboriginal person and/or a Torres Strait Islander person

For more information please visit - Affr…

Employment with the Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is subject to conditions prescribed within the Public Service Act 1999 including:

• Citizenship: candidates must be an Australian citizen at the time of submitting your application.
• Health Assessment: The preferred candidate may be required to undergo a medical examination conducted by the department’s preferred medical provider.
• Security Clearance: The successful candidate must be able to obtain and/or maintain a security clearance at Negative Vetting 1 Level. You must be willing to disclose all relevant and required information.You must have lived in Australia, or have a checkable background, for at least the preceding five years for Baseline Vetting clearances.More information on the security clearance vetting process is available on the Australian Government Security Vetting Agency (AGSVA) website.
• Police check: The successful candidate must complete an Australian Federal Police criminal history check.
• Integrity and Performance check: The successful candidate must satisfy the requirements in an Integrity and Performance check which is completed by your most recent employer.

Getting to know the Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts

Our work connects and enriches every Australian community, underpins our economy and society, and empowers our regions. We provide policy advice and deliver programs, projects and services in the infrastructure, transport, communications, sport and arts sectors, supporting our regions, cities and territories.Our staff have the opportunity to work on high profile and diverse national projects that have a meaningful impact on the lives of all Australians. We seek people with a wide range of skills and competencies. Whether you write policy, deliver programs, projects or corporate services, or have experience in research, data or technology, we look for employees who are innovative, respectful and professional.We are an inclusive employer and promote, value and support diversity among our employees with the aim of ensuring our workforce reflects, respects and benefits from diverse communities including Aboriginal and/or Torres Strait Islander peoples, people with cultural and linguistic diversity, people with disability and LGBTQI+ people. We are committed to achieving gender equality and, in particular, supporting women’s progression into senior leadership.