Principal Cyber Security Specialist

Queensland Government; Brisbane; In loco; AUD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

Queensland Government in Brisbane is seeking a senior security professional to lead investigations of security infrastructure, manage capacity and change, and guide the secure delivery of services.

You will mentor analysts, contribute to threat remediation and architecture reviews while staying current with security trends and industry certifications. A demanding on-call component is required.

Competenze

• 4+ years of demonstrated experience in configuration, support and administration of enterprise security solutions.
• CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, CCSP, or CISM certifications are highly desirable.
• Experience with enterprise security solutions: Firewalls/IDS-IPS, ADCs, VPN, Email & Web Content Filtering, IAM, MFA, SIEM/SOAR, EDR/NDR, PKI.

Mansioni

• Lead technical investigations of security infrastructure to resolve service degradation within SLAs.
• Provide capacity planning, config management, admin, change management and documentation for security technologies.
• Mentor analysts, prioritize workload and provide guidance during complex incidents.
• Drive continual improvement of SOC services including automation, monitoring, vulnerability remediation and reporting.

Conoscenze

Incident management

Team mentoring

Security architecture

Stakeholder communication

Technical investigations

Formazione

Bachelor's degree in Computer Science

Strumenti

SIEM/SOAR

EDR/NDR

Cloud security (AWS/Azure)

MS Defender/Sentinel

MFA & IAM

Descrizione del lavoro

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:* Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.* Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.* Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.* Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation, reporting and other standard operating processes & procedures.* Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.* Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies.* Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.* Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.Mandatory requirements* Participation in on-call arrangements and out of hours work as requiredHighly desirable requirements* Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.* 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions: Enterprise Firewalls & IDS/IPS* Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)* Networking & VPN solutions* Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as: Email & Web Content Filtering* Identity & Access Management* Multifactor Authentication & RADIUS* Cloud based services such as AWS & Azure.* SIEM & SOAR* EDR & NDR.* PKI* Microsoft Security Stack (including Sentinel and Defender)Desirable requirements* Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.* Experience in the following technology domains with a background in one or more: Security Assurance Testing (Pen testing).* Software Development and integration* Infrastructure (server operating systems, virtualisation, database, storage)* Automation & Orchestration* Desktop operating system management* Mobility (Apple, Windows, MDM's)* Knowledge of ITIL and Dev/Sec/OpsAdditional information:* For further information regarding the role or to apply please click on the APPLY ONLINE button below* Applications to remain current for 12 monthsThis work is licensed under a Creative Commons Attribution 3.0 Australia License.