Cyber Defence Officer - (Canberra/Sydney based - Hybrid working)

CSC Commonwealth Superannuation Corporation; Sydney; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Remote/Hybrid work options

Job summary

CSC Commonwealth Superannuation Corporation is seeking a Cyber Defence Officer to join the Sydney/Canberra hybrid team. You will support security operations, incident response, and compliance efforts across enterprise assets.

You will work with SIEM/EDR, threat intel, and IAM tools, bringing hands-on cyber security experience and strong communication to a collaborative environment.

Qualifications

• Tertiary qualification in Cyber Security, Computer Science or related field.
• At least 2 years’ ICT experience with hands-on cybersecurity exposure.
• Knowledge of security frameworks and standards (NIST, PSPF, ISO 27001/27002, ASD Essential Eight).
• Experience with vulnerability management and malware protection technologies.
• Exposure to cloud environments (AWS/Azure).
• Experience with security platforms and configurations (firewalls, switches, routers, proxies).
• Strong analytical and problem-solving skills with clear communication.

Responsibilities

• Monitor and review security alerts; escalate as needed.
• Assist in developing and testing detection use cases and playbooks.
• Support incident triage, investigation, and documentation; contribute to lessons learned.
• Assist with security platforms operations (SIEM, EDR, threat intel tools).
• Support privileged access reviews and audit responses.
• Develop and deliver security awareness content for stakeholders.
• Contribute to security policy alignment and continuous improvement initiatives.

Skills

Cyber security

Incident response

Threat monitoring

Vulnerability mgmt

Cloud security

SIEM experience

IAM

Analytical thinking

Education

Cyber Security / Computer Science degree

Tools

SIEM

EDR

Threat intel tools

Active Directory security

Job description

Cyber Defence Officer - (Canberra/Sydney based - Hybrid working)

CSC Commonwealth Superannuation Corporation – Sydney NSW

Contract

Hybrid

16h ago , from CSC Commonwealth Superannuation Corporation

About the Role

The Cyber Defence Officer supports CSC Cyber Defence team in protecting CSC financial and information assets. This role focuses on assisting with security monitoring, incident response, vulnerability assessments, and compliance activities.

Working within a small team of specialist, the officer uses modern security tools, processes, and frameworks to contribute to the ongoing improvement of CSC’s security posture.

The role requires a solid understanding of Information Security fundamentals, a strong willingness to learn, and the drive to develop technical expertise while directly helping to reduce cyber risks.

What You Will Do

Security Operations Support

• Monitor and review security alerts, escalating issues to senior analysts or supervisors as required
• Assist in developing and testing detection use cases and response playbooks
• Help refine alerting systems to reduce false positives and improve accuracy
• Support basic threat intelligence monitoring and prepare summary report

Security Incident Response & Investigation

• Assist with triage and investigation of security incidents under supervision
• Support deeper analysis and root cause investigations led by senior staff
• Contribute to incident documentation, reporting, and lessons learned activities
• Participate in information sharing with government and industry partners

Security Platforms Support

• Support day-to-day operation of security platforms (e.g., SIEM, EDR, threat intel tools)
• Assist with optimisation and configuration updates under guidance
• Help maintain documentation, including procedures, configurations, and playbooks
• Contribute ideas for automation and continuous improvement initiatives

Security Compliance & Access Audit Support

• Support regular privileged access reviews and the enforcement of least privilege
• Assist in preparing compliance reports and responding to audit requests
• Maintain records to demonstrate alignment with internal policies and external requirements
• Contribute to process improvements to strengthen compliance activities

Security Awareness & Culture Support

• Provide timely advice to business and IT stakeholders on security best practices
• Develop and deliver awareness content, articles, and internal briefings
• Actively promote a strong security culture across CSC

Specific duties, deliverables and reporting lines may vary from time-to-time dependant on business needs and priorities. Key objectives and measurements will be captured in the Performance & Development planning cycle, established annually and adapted as needed.

What you’ll bring

You’ll bring a strong foundation in cyber security, combined with practical experience investigating security issues and working with enterprise security technologies. You’ll be comfortable working across technical and business teams, translating complex security matters into clear, practical advice.

Ideally, you’ll have

• Tertiary qualifications in Cyber Security, Computer Science or a related discipline.
• At least 2 years’ experience in Information and Communications Technology (ICT), with hands‑on exposure to cyber security.
• Experience investigating security incidents, identifying issues and recommending practical solutions.
• Knowledge of Microsoft Active Directory security configuration.
• Experience working with vulnerability management and malware protection technologies.
• Exposure to enterprise security technologies such as SIEM, Identity and Access Management (IAM), Endpoint Protection, DDoS Protection and Data Loss Prevention (DLP).
• Knowledge of security practices across cloud environments, particularly AWS and Azure.
• An understanding of recognised cyber security frameworks and standards such as NIST, PSPF, OWASP, PCI DSS, ISO 27001/27002, ASD Essential Eight and NIST CSF.
• Knowledge of security configuration across infrastructure including switches, routers, proxies, load balancers, firewalls, Windows and Linux environments, and email security technologies.
• Strong analytical and problem‑solving skills, with the ability to assess information, identify risks and recommend practical solutions.
• Well‑developed written, verbal and presentation skills, with the ability to communicate security issues clearly to different audiences.
• A collaborative approach and the ability to build strong working relationships across technical and non-technical teams.

Highly regarded

• Industry security certifications such as CISSP, CISM, CEH or GSEC.
• Experience working with security and compliance requirements within financial services, government or other regulated environments, including APRA and the Australian Government Information Security Manual (ISM).
• Broader experience implementing or operating enterprise cyber security technologies.

Why join CSC?

• Remote/Hybrid work options
• Join CSC’s Tech transformation journey and gain exposure to complex technology initiatives across a leading superannuation environment.

Learn more about CSC and our benefits on our career siteCareers