Principal Cyber Security Specialist, Queensland Fire Department

Queensland Government; Brisbane; Vor Ort; AUD 160.000 - 210.000; Vollzeit

Zusammenfassung

The Queensland Fire Department Brisbane - North seeks a Principal Cyber Security Specialist to lead security investigations, support secure service delivery and guide capacity planning across enterprise security platforms.

You will mentor analysts, drive SOC improvements, manage on-call responsibilities and collaborate with ICT professionals and external stakeholders to promote robust information security practices within the organisation.

Qualifikationen

• 4+ years in enterprise security configuration and administration.
• CISSP, GIAC, CEH, OSCP, CCSP, CISM or vendor certifications.
• Experience with security technology: firewalls, IDS/IPS, VPN, SIEM, EDR.
• Knowledge of Microsoft security stack (Sentinel/Defender).

Aufgaben

• Lead and conduct security investigations to resolve business service degradation.
• Provide expertise in capacity planning, configuration management, and change management of security technologies.
• Review and challenge designs to enable secure delivery of business applications and services.
• Drive continual improvement of SOC services including automation, monitoring, and reporting.
• Mentor analysts and provide guidance during complex incidents.
• Keep knowledge up-to-date on security developments and trends.
• Communicate with ICT professionals and external stakeholders to promote information security practices.
• Contribute to operational plans and security strategy development.

Kenntnisse

Security operations

Team mentoring

On-call readiness

Security best practices

Ausbildung

Tertiary qualifications in Computer Science or related

Security certifications (CISSP, GIAC, CEH, etc.)

Tools

Enterprise Firewalls

IDS/IPS

Application Delivery Controllers

Load Balancers

VPN solutions

Email & Web Filtering

Identity & Access Management

MFA & RADIUS

Cloud AWS

Azure

SIEM & SOAR

EDR & NDR

PKI

Microsoft Defender/Sentinel

Jobbeschreibung

Principal Cyber Security Specialist, Queensland Fire Department Brisbane - North, Australia

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

• Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
• Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
• Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.
• Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation, reporting and other standard operating processes & procedures.
• Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.
• Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies.
• Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.
• Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.

Mandatory requirements

• Participation in on-call arrangements and out of hours work as required

Highly desirable requirements

• Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
• 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions: Enterprise Firewalls & IDS/IPS
• Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
• Networking & VPN solutions
• Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as: Email & Web Content Filtering
• Identity & Access Management
• Multifactor Authentication & RADIUS
• Cloud based services such as AWS & Azure.
• SIEM & SOAR
• EDR & NDR.
• PKI
• Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements

• Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.
• Experience in the following technology domains with a background in one or more: Security Assurance Testing (Pen testing).
• Software Development and integration
• Infrastructure (server operating systems, virtualisation, database, storage)
• Automation & Orchestration
• Desktop operating system management
• Mobility (Apple, Windows, MDM's)
• Knowledge of ITIL and Dev/Sec/Ops

Additional information

• Applications to remain current for 12 months