Principal Cyber Security Specialist

Queensland Fire Department; Albion; On-site; AUD 140,000 - 180,000; Full time

Job summary

Queensland Fire Department is seeking a senior technical specialist in the Security Operations Centre to provide expert-level guidance, hands-on engineering and incident response leadership across the department's security infrastructure.

You will investigate complex incidents, drive SOC capability improvements, and mentor analysts through challenging investigations to ensure information assets remain secure, resilient and compliant with standards and legislation.

Qualifications

• Participation in on-call arrangements and out of hours work as required.
• 4+ years of demonstrated experience configuring, support and administration of enterprise security solutions.
• Experience with Firewalls, IDS/IPS, Application Delivery Controllers, VPNs, Email & Web Content Filtering, IAM, MFA & RADIUS, Cloud AWS/Azure, SIEM & SOAR, EDR & NDR, PKI, and Microsoft Security Stack.

Responsibilities

• Lead and conduct technical investigations of security infrastructure to resolve service degradation and failures within agreed SLAs.
• Provide technical expertise in capacity planning, configuration management, administration, change management, documentation and support of security technologies.
• Contribute input into design, installation and configuration of security services to enable secure delivery of business applications.
• Drive continual improvement of SOC services including monitoring, automation, vulnerability assessment and incident response.
• Mentor analysts and provide training through complex incidents.
• Stay updated on security trends to evaluate new technologies and practices.
• Communicate with ICT professionals and external stakeholders to promote sound information security practices.
• Participate in development of operational plans and ICT strategies to support security infra.

Skills

Incident response leadership

Technical investigations

Security operations center

Mentoring analysts

Security capability improvement

Education

Bachelor's degree in Computer Science or equivalent

Tools

Enterprise Firewalls

IDS/IPS

Application Delivery Controllers

VPN

Email & Web Content Filtering

Identity & Access Management

MFA & RADIUS

Cloud security (AWS & Azure)

SIEM & SOAR

EDR & NDR

PKI

Microsoft Security Stack (Sentinel/ Defender)

Job description

You will operate as a senior technical specialist within the Security Operations Centre, providing expert-level advice, hands-on engineering and incident response leadership across QFD's security infrastructure.

You will investigate and resolve complex, escalated security incidents, drive continuous improvement of SOC capability, and mentor analysts through technically demanding investigations, ensuring the department's information assets remain secure, resilient and compliant with relevant standards and legislative requirements.

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

• Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
• Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
• Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.
• Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation, reporting and other standard operating processes & procedures.
• Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.
• Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies.
• Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.
• Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.

Mandatory requirements

• Participation in on-call arrangements and out of hours work as required

Highly desirable requirements

• Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
• 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions: Enterprise Firewalls & IDS/IPS
• Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
• Networking & VPN solutions
• Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as: Email & Web Content Filtering
• Identity & Access Management
• Multifactor Authentication & RADIUS
• Cloud based services such as AWS & Azure.
• SIEM & SOAR
• EDR & NDR.
• PKI
• Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements

• Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.
• Experience in the following technology domains with a background in one or more: Security Assurance Testing (Pen testing).
• Software Development and integration
• Infrastructure (server operating systems, virtualisation, database, storage)
• Automation & Orchestration
• Desktop operating system management
• Mobility (Apple, Windows, MDM's)
• Knowledge of ITIL and Dev/Sec/Ops

Additional information

• Applications to remain current for 12 months