Lead Cyber Security Engineer

Bridge IT Engineering; Canberra; On-site; AUD 190,000 - 230,000; Full time

Job summary

Bridge IT Engineering seeks a Lead Cyber Security Engineer to own CAASM strategy for a major Federal Government department in Canberra. You will lead admin, sustainment and optimisation of CAASM capabilities, strengthening asset visibility across complex ICT environments.

You will bring extensive experience with CAASM platforms (runZero or similar), asset discovery, network and cloud security, and strong stakeholder engagement to drive continuous improvement and platform lifecycle management on

Qualifications

• Experience leading enterprise CAASM programs.
• Strong knowledge of CAASM, asset discovery and attack surface management.
• Experience integrating security platforms with enterprise systems.
• Excellent analytical and stakeholder engagement skills.

Responsibilities

• Administer, maintain and optimise enterprise CAASM platforms, including runZero.
• Monitor platform health, performance, availability and operational effectiveness.
• Manage integrations across security, network, cloud, identity and asset management systems.
• Enhance enterprise asset visibility, identifying unknown, unmanaged and potentially vulnerable assets.
• Develop and maintain asset reconciliation, correlation and deduplication processes.
• Support network discovery, fingerprinting and segmentation validation activities.
• Maintain technical documentation, operational procedures and service management processes.
• Produce technical reporting, governance and assurance documentation.
• Contribute to continuous improvement, vendor engagement and platform lifecycle management.
• Demonstrated experience administering runZero or similar CAASM technologies.
• Strong understanding of cyber asset discovery, attack surface management and enterprise asset visibility.
• Experience integrating cyber security platforms with enterprise systems.
• Strong technical knowledge of networking, operating systems, cloud environments and network protocols.

Skills

CAASM

RunZero

Asset visibility

Network discovery

Troubleshooting

Scripting

Tools

Python

PowerShell

REST APIs

Webhooks

Job description

Lead Cyber Security Engineer – CAASM / runZero Specialist

Contract: 12 months + 2 x 12-month extension options

Start Date: 11 January 2027

Working Arrangements: Onsite, 5 days per week (up to 40 hours)

Security Clearance: NV1 clearance

Applications Close: 16 November 2026

Bridge IT Engineering is seeking an experienced Lead Cyber Security Engineer – CAASM / runZero Specialist to join a major Federal Government department in Canberra. This is an excellent opportunity for a highly skilled cyber security professional to lead the administration, sustainment and optimisation of an enterprise Cyber Asset Attack Surface Management (CAASM) capability, supporting critical cyber security operations and improving visibility across complex ICT environments.

Key Responsibilities

• Administer, maintain and optimise enterprise CAASM platforms, including runZero.
• Monitor platform health, performance, availability and operational effectiveness.
• Manage integrations across security, network, cloud, identity and asset management systems.
• Enhance enterprise asset visibility, identifying unknown, unmanaged and potentially vulnerable assets.
• Develop and maintain asset reconciliation, correlation and deduplication processes.
• Support network discovery, fingerprinting and segmentation validation activities.
• Maintain technical documentation, operational procedures and service management processes.
• Produce technical reporting, governance and assurance documentation.
• Contribute to continuous improvement, vendor engagement and platform lifecycle management.
• Demonstrated experience administering runZero or similar CAASM technologies, including configuration, monitoring, upgrades and troubleshooting.
• Strong understanding of cyber asset discovery, attack surface management and enterprise asset visibility.
• Experience integrating cyber security platforms with enterprise systems and multiple data sources.
• Strong technical knowledge of networking, operating systems, cloud environments and network protocols.
• Practical experience with unauthenticated network fingerprinting, subnet tracing and network segmentation.
• Experience developing logic for asset correlation, data reconciliation and deduplication.
• Excellent analytical, troubleshooting, documentation and stakeholder engagement skills.

Highly Desirable

• Experience with REST APIs, webhooks and scripting using Python or PowerShell.
• Background in cyber security operations, vulnerability management or technology risk.
• Knowledge of Australian Government security frameworks, including PSPF and ISM.
• Experience with vulnerability discovery, scoring, prioritisation and remediation.
• Relevant industry certifications such as CISSP, CISM or CompTIA Security+.