Cyber Defence Officer - (Canberra/Sydney based - Hybrid working)

Commonwealth Superannuation Corporation; Canberra; Hybrid; AUD 80,000 - 120,000; Full time

Benefits offered by this job

Remote/Hybrid work options

Job summary

Commonwealth Superannuation Corporation is seeking a Cyber Defence Officer to support our cyber defence team from Canberra with hybrid working options. You will assist in security monitoring, incident response and compliance activities, while developing technical expertise to reduce cyber risks.

The role involves working with SIEM/EDR tools, threat intel, and contributing to playbooks, reports and awareness campaigns across the CSC environment.

Qualifications

• Tertiary qualifications in Cyber Security, Computer Science or a related discipline.
• At least 2 years’ experience in ICT with hands‑on exposure to cyber security.
• Experience investigating security incidents, identifying issues and recommending practical solutions.
• Knowledge of Microsoft Active Directory security configuration.
• Exposure to enterprise security technologies such as SIEM, IAM, Endpoint Protection, DLP.

Responsibilities

• Monitor and review security alerts, escalating issues to senior analysts or supervisors as required.
• Assist with triage and investigation of security incidents under supervision.
• Support day‑to‑day operation of security platforms (SIEM, EDR, threat intel tools).
• Assist in preparing compliance reports and responding to audit requests.
• Develop and deliver security awareness content and promote a strong security culture across CSC.

Skills

Analytical skills

Problem solving

Security operations

Incident investigation

Security tooling

Communication skills

Education

Cyber Security or CS degree

Tools

SIEM

EDR

Threat intel tools

Job description

Cyber Defence Officer - (Canberra/Sydney based - Hybrid working)

Commonwealth Superannuation Corporation – Canberra ACT

14h ago , from Commonwealth Superannuation Corporation

Information & Communication Technology,Security & Protective Services

About the Role:

The Cyber Defence Officer supports CSC Cyber Defence team in protecting CSC financial and information assets. This role focuses on assisting with security monitoring, incident response, vulnerability assessments, and compliance activities.

Working within a small team of specialist, the officer uses modern security tools, processes, and frameworks to contribute to the ongoing improvement of CSC’s security posture.

The role requires a solid understanding of Information Security fundamentals, a strong willingness to learn, and the drive to develop technical expertise while directly helping to reduce cyber risks.

What You Will Do:

Security Operations Support

• Monitor and review security alerts, escalating issues to senior analysts or supervisors as required
• Assist in developing and testing detection use cases and response playbooks
• Help refine alerting systems to reduce false positives and improve accuracy
• Support basic threat intelligence monitoring and prepare summary report

Security Incident Response & Investigation

• Assist with triage and investigation of security incidents under supervision
• Support deeper analysis and root cause investigations led by senior staff
• Contribute to incident documentation, reporting, and lessons learned activities
• Participate in information sharing with government and industry partners

Security Platforms Support

• Support day-to-day operation of security platforms (e.g., SIEM, EDR, threat intel tools)
• Assist with optimisation and configuration updates under guidance
• Help maintain documentation, including procedures, configurations, and playbooks
• Contribute ideas for automation and continuous improvement initiatives

Security Compliance & Access Audit Support

• Support regular privileged access reviews and the enforcement of least privilege
• Assist in preparing compliance reports and responding to audit requests
• Maintain records to demonstrate alignment with internal policies and external requirements
• Contribute to process improvements to strengthen compliance activities

Security Awareness & Culture Support

• Provide timely advice to business and IT stakeholders on security best practices
• Develop and deliver awareness content, articles, and internal briefings
• Actively promote a strong security culture across CSC

Specific duties, deliverables and reporting lines may vary from time-to-time dependant on business needs and priorities. Key objectives and measurements will be captured in the Performance & Development planning cycle, established annually and adapted as needed.

What You Will Do:

Security Operations Support

• Monitor and review security alerts, escalating issues to senior analysts or supervisors as required
• Assist in developing and testing detection use cases and response playbooks
• Help refine alerting systems to reduce false positives and improve accuracy
• Support basic threat intelligence monitoring and prepare summary report

Security Incident Response & Investigation

• Assist with triage and investigation of security incidents under supervision
• Support deeper analysis and root cause investigations led by senior staff
• Contribute to incident documentation, reporting, and lessons learned activities
• Participate in information sharing with government and industry partners

Security Platforms Support

• Support day-to-day operation of security platforms (e.g., SIEM, EDR, threat intel tools)
• Assist with optimisation and configuration updates under guidance
• Help maintain documentation, including procedures, configurations, and playbooks
• Contribute ideas for automation and continuous improvement initiatives

Security Compliance & Access Audit Support

• Support regular privileged access reviews and the enforcement of least privilege
• Assist in preparing compliance reports and responding to audit requests
• Maintain records to demonstrate alignment with internal policies and external requirements
• Contribute to process improvements to strengthen compliance activities

Security Awareness & Culture Support

• Provide timely advice to business and IT stakeholders on security best practices
• Develop and deliver awareness content, articles, and internal briefings
• Actively promote a strong security culture across CSC

Specific duties, deliverables and reporting lines may vary from time-to-time dependant on business needs and priorities. Key objectives and measurements will be captured in the Performance & Development planning cycle, established annually and adapted as needed.

What you’ll bring

You’ll bring a strong foundation in cyber security, combined with practical experience investigating security issues and working with enterprise security technologies. You’ll be comfortable working across technical and business teams, translating complex security matters into clear, practical advice.

Ideally, you’ll have:

• Tertiary qualifications in Cyber Security, Computer Science or a related discipline.
• At least 2 years’ experience in Information and Communications Technology (ICT), with hands‑on exposure to cyber security.
• Experience investigating security incidents, identifying issues and recommending practical solutions.
• Knowledge of Microsoft Active Directory security configuration.
• Experience working with vulnerability management and malware protection technologies.
• Exposure to enterprise security technologies such as SIEM, Identity and Access Management (IAM), Endpoint Protection, DDoS Protection and Data Loss Prevention (DLP).
• Knowledge of security practices across cloud environments, particularly AWS and Azure.
• An understanding of recognised cyber security frameworks and standards such as NIST, PSPF, OWASP, PCI DSS, ISO 27001/27002, ASD Essential Eight and NIST CSF.
• Knowledge of security configuration across infrastructure including switches, routers, proxies, load balancers, firewalls, Windows and Linux environments, and email security technologies.
• Strong analytical and problem‑solving skills, with the ability to assess information, identify risks and recommend practical solutions.
• Well‑developed written, verbal and presentation skills, with the ability to communicate security issues clearly to different audiences.
• A collaborative approach and the ability to build strong working relationships across technical and non‑technical teams.

Highly regarded:

• Industry security certifications such as CISSP, CISM, CEH or GSEC.
• Experience working with security and compliance requirements within financial services, government or other regulated environments, including APRA and the Australian Government Information Security Manual (ISM).
• Broader experience implementing or operating enterprise cyber security technologies.

Why join CSC?

• Remote/Hybrid work options
  
• Join CSC’s Tech transformation journey and gain exposure to complex technology initiatives across a leading superannuation environment.
  

Learn more about CSC and our benefits on our career siteCareers