Defence Cyber Security Consultant – Risk & Threat Modeling

KBR, Inc.; Canberra; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working

Competitive salary (including annual

Paid parental leave

Income protection

Corporate rewards

Salary packaging/Novated leasing

Employee stock purchase plans

Flu shots, skin checks and discounted

Career development: Online learning,

Job summary

KBR, Inc. in Australia is seeking a Cyber Security Consultant to deliver cyber risk assessments and ensure compliance within Defence environments.

You will operate in a fast-paced setting on complex ICT and communications systems, applying expert judgement to manage risk and produce authoritative Security Assessment Reports. The role requires NV1 clearance, Australian citizenship, and a strong track record in assessment, risk management, and security controls.

Qualifications

• Relevant certifications or experience aligned to cyber security assessment.
• Strong experience in cyber security assessment, risk management and compliance.
• Knowledge of Defence security frameworks, including ISM and PSPF.
• Experience working with complex ICT environments or communications systems.
• Solid understanding of networks, systems, architectures and security controls.
• Defence, CASG or Army background.
• Exposure to Land C4 or similar integrated capabilities.
• Experience assessing cyber risk in large-scale or mission-critical environments.
• Minimum AGSVA NV1 Security Clearance and Australian citizenship.

Responsibilities

• Deliver cyber security assessment and authorisation activities aligned to ISM and PSPF.
• Conduct Operational and Design Effectiveness Reviews to evaluate system security.
• Assess and audit the effectiveness of implemented security controls.
• Produce key artefacts, including SARs, ATO briefs and risk assessments.
• Identify, assess and manage cyber security risks and vulnerabilities across complex systems.
• Analyse security exceptions, defects and architectural weaknesses.
• Conduct threat modelling and evaluate system security architecture.
• Support the protection of system confidentiality, integrity and availability.
• Contribute to governance activities, including Change Control Boards.
• Review documentation, policies and procedures to ensure alignment with Defence requirements.
• Ensure ongoing compliance with mandated cyber security standards and controls.

Skills

Cyber security assessment

Risk management

Compliance

Defence security knowledge

Education

CISSP / CISM / IRAP / ISO 27001

Job description

KBR, Inc. in Australia is seeking a Cyber Security Consultant to deliver cyber risk assessments and ensure compliance within Defence environments.

You will operate in a fast-paced setting on complex ICT and communications systems, applying expert judgement to manage risk and produce authoritative Security Assessment Reports. The role requires NV1 clearance, Australian citizenship, and a strong track record in assessment, risk management, and security controls.