Principal Cyber Security Specialist

Queensland Fire & Emergency Services; Albion; On-site; AUD 130,000 - 180,000; Full time

Job summary

Queensland Fire & Emergency Services is recruiting a Senior Cyber and Information Security professional to lead incident response and technical investigations within the Security Operations Centre.

You will drive continuous improvement of security infrastructure, mentor analysts, and collaborate with cross-functional teams to secure critical services across Queensland communities.

Qualifications

• Advanced security engineering experience across enterprise environments.
• Strong knowledge of firewalls, IDS/IPS and VPNs.
• Experience with IAM, PKI and cloud security in AWS/Azure.

Responsibilities

• Lead technical investigations of security incidents and degraded services.
• Configure, manage and document security technologies and changes.
• Support design reviews for secure delivery of business apps and services.
• Improve SOC operations including monitoring, automation and response.
• Mentor analysts during complex incidents and incidents response
• Stay current with security trends and technologies to guide practice.

Skills

Security certifications

Enterprise security

Firewall/IDS/IPS

Networking & VPN

Identity & Access Management

Cloud (AWS & Azure)

SIEM & SOAR

EDR & NDR

PKI

Microsoft Security Stack

Education

Tertiary qualifications in Computer Science or equivalent

Tools

Microsoft Sentinel

Microsoft Defender

Job description

Queensland Fire & Emergency Services – Albion QLD

3d ago , from Fire and Emergency Services Queensland

The Queensland Fire Department (QFD) provides fire prevention, preparedness and response services to fire in the built and landscape environments, as well as scientific and specialist capabilities to Queensland communities. The QFD provides a multi-hazard emergency response, including road crash rescue, bushfire, hazardous material, technical and vertical rescue, severe weather incidents, remote and swiftwater rescue, and provides a number of functions supporting community safety outcomes.

The department encompasses Queensland Fire and Rescue (QFR), Rural Fire Service Queensland (RFSQ), as well as the broader department which work together to pre-empt, prevent, mitigate and manage the consequences of fires and other emergencies on Queensland communities and support our large volunteer membership across the state.

The QFD is an organisation that is committed to reframing the department’s relationship with Aboriginal and Torres Strait Islander peoples, communities, and organisations through activities identified in the QFD Reframing the Relationship Plan, contributing to Closing the Gap outcomes and building our cultural capability.

Cyber and Information Security is responsible for managing the department’s cyber security risk posture and response capability, safeguarding the confidentiality, integrity and availability of QFD's information and technology assets. The unit manages the agency's security roadmap, incident response, and information security requirements across a complex operational technology environment, balancing risk management with the need to enable and advance frontline service delivery.

Reporting to the Director, Cyber and Information Security, you will operate as a senior technical specialist within the Security Operations Centre, providing expert-level advice, hands‑on engineering and incident response leadership across QFD's security infrastructure. You will investigate and resolve complex, escalated security incidents, drive continuous improvement of SOC capability, and mentor analysts through technically demanding investigations, ensuring the department's information assets remain secure, resilient and compliant with relevant standards and legislative requirements.

Mandatory requirements

• Participation in on-call arrangements and out of hours work as required

Highly desirable requirements

• Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
• 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions:
  • Enterprise Firewalls & IDS/IPS
  • Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
  • Networking & VPN solutions
• Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as:
  • Email & Web Content Filtering
  • Identity & Access Management
  • Multifactor Authentication & RADIUS
  • Cloud based services such as AWS & Azure.
  • SIEM & SOAR
  • EDR & NDR.
  • PKI
  • Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements

• Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.

• Experience in the following technology domains with a background in one or more:
  • Security Assurance Testing (Pen testing).
  • Software Development and integration
  • Infrastructure (server operating systems, virtualisation, database, storage)
  • Automation & Orchestration
  • Desktop operating system management
  • Mobility (Apple, Windows, MDM’s)
• Knowledge of ITIL and Dev/Sec/Ops

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

• Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
• Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
• Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.
• Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation, reporting and other standard operating processes & procedures.
• Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.
• Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies.
• Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.
• Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.

To determine your suitability for the role, you will be assessed on the following Leadership Competencies for Queensland behavioural profiles that link to the “key accountabilities” for this role:

Leadership Competency Stream – Individual Contributor (leading self)

Vision

• Simulates ideas and innovation

Results

• Drives accountability and outcomes

Accountability

• Fosters healthy and inclusive workplaces
• Demonstrates sound governance

Once you join us we will want you to exemplify the QFD shared values:

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .