Cyber Security Technical Professional

Compas; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Compas seeks a Lead Cyber Security Specialist to own a CAASM capability in a complex Australian Government environment in Canberra. The role requires full-time onsite attendance five days per week and involves administering RunZero to strengthen asset visibility and support cyber security operations.

You will manage integrations with enterprise security, network, cloud and identity sources, enhance discovery of unknown assets and maintain governance documentation for continuous service

Qualifications

• Experience administering RunZero or similar CAASM technologies with configuration, monitoring and troubleshooting.
• Strong knowledge of asset discovery, network fingerprinting and asset visibility.
• Experience integrating platforms with enterprise security, network, cloud and identity data sources.
• Solid understanding of OS, networking and cloud environments; strong analytical and stakeholder skills.

Responsibilities

• Administer, maintain and optimise CAASM platform capabilities including configuration, monitoring, upgrades and troubleshooting.
• Manage integrations with enterprise security, network, cloud and identity sources.
• Improve asset discovery and visibility of unknown assets through data reconciliation.
• Maintain documentation, governance reporting and continuous service improvements.

Skills

RunZero CAASM

Asset discovery

Network fingerprinting

Subnet tracing

Stakeholder engagement

Tools

CAASM platforms

Job description

Lead Cyber Security Specialist | CAASM & runZero

Take ownership of a Cyber Asset Attack Surface Management (CAASM) capability within a complex Australian Government environment. Administer and optimise runZero, strengthen enterprise-wide asset visibility and support critical cyber security operations. This role requires full-time onsite attendance in Canberra, five days per week.

Location

Canberra, ACT

Work Arrangement

Full-time onsite - 5 days per week

Contract Duration

12 months, with 2 x 12-month extension options

Security Clearance Requirement

Must have a Negative Vetting Level 1 (NV1) clearance or higher

Essential Tasks

• Administer, maintain and optimise runZero and CAASM platform capabilities, including configuration, monitoring, upgrades and troubleshooting.
• Manage integrations with enterprise security, network, cloud, identity and asset data sources.
• Improve cyber asset discovery, data quality and visibility of unknown or unmanaged assets through data reconciliation and deduplication.
• Maintain technical documentation, operational procedures, governance reporting and continuous service improvements.

Key Criteria

• Demonstrated experience administering runZero or similar CAASM technologies, including platform configuration, monitoring and troubleshooting.
• Strong knowledge of asset discovery, network fingerprinting, subnet tracing, network segmentation and cyber asset visibility.
• Experience managing platform integrations and reconciling unauthenticated network fingerprints with authenticated enterprise data.
• Strong understanding of operating systems, networking and cloud environments, supported by analytical, problem-solving and stakeholder engagement skills.

Desirable experience includes REST APIs, webhooks, Python or PowerShell scripting, vulnerability management, PSPF and ISM frameworks. CISSP, CISM or CompTIA Security+ certifications are advantageous.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE

Due to the nature of this environment, candidates must be able to obtain an NV1 security clearance.