Cyber Security Specialist

Strategic Partners Australia; Canberra; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

Strategic Partners Australia is seeking a Cyber Security Automation Engineer for a Federal Government client in Canberra. The role requires hands-on design and delivery of security automation to strengthen enterprise protections.

The initial 6 weeks are onsite in Canberra, then a hybrid arrangement. Candidates must hold NV1 clearance or higher and demonstrate experience with SIEM/SOAR integrations and scripting in Ansible, Python and PowerShell.

Qualifications

• 5+ years designing and building cyber security automation playbooks and workflows in gov/enterprise.
• Experience integrating SIEM/SOAR with enterprise systems via APIs or connectors.
• Strong scripting in Ansible, Python and PowerShell for security automation.
• Understanding of incident triage, threat hunting, vulnerability mgmt and incident response.
• Translate security requirements into automated technical solutions for stakeholders.
• Knowledge of PSPF, ISM, Essential 8, NIST and PICERL lifecycle.

Skills

Cyber security automation

Ansible scripting

Python scripting

PowerShell scripting

Incident response

Threat hunting

Automation design

Tools

SIEM platforms

SOAR platforms

Job description

We are hiring "Cyber Security Automation Engineer" candidates for our Federal Government Client.

Work Location - Canberra (work onsite for the first 6 weeks, followed by hybrid arrangements)

Security Clearance: NV1

Mandatory Skills & Experience

• 5+ years of hands-on experience designing and building cyber security automation playbooks, workflows in an enterprise or government environment.
• Experience integrating SIEM/SOAR platforms with enterprise security and IT systems via APIs, webhooks and custom connectors.
• Strong scripting skill in Ansible, Python, PowerShell etc security automation and tool integration.
• Understanding of security operations process including incident triage, threat hunting, vulnerability management and incident response.
• Ability to translate security requirements into automated technical solutions and communicate outcomes to technical and non-technical stakeholders.
• Cyber security knowledge and experience: Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential 8 Strategies, National Institute of Standards and Technology (NIST), Incident response lifecycle (such as Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned (PICERL))