Security Dev Sec Ops

Amentum company; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

Amentum seeks an experienced Security Dev Sec Ops professional to interpret information assurance policies, apply controls, and support accreditation across complex Defence ICT environments in Canberra. The role requires significant security program leadership, policy development, and risk mitigation collaboration with multiple agencies.

Ideal candidates will bring 8–10 years in IT with strong DevSecOps and Agile delivery experience, and familiarity with DSPF/ISM frameworks, delivering secure

Qualifications

• Minimum 8–10 years of experience in an information technology role with exposure to information security.
• Extensive experience with the ISM and Defence Security Policy Framework (DSPF).
• Experience working in leading cyber security initiatives within ASD, DDG or CASG in the Defence Portfolio.
• Recent experience authoring Defence ICT Security documentation for ICT systems with ATO.
• Experience with Defence security networks and deployment environments.

Responsibilities

• Interpret information assurance and security policies and apply controls to manage risk.
• Provide guidance and solutions for information management across security domains in line with policies and standards.
• Plan and conduct information assurance reviews for accreditation of complex domains and supply chain scenarios.
• Develop and refine policies, standards and guidelines for ongoing management in operational contexts.

Skills

InfoSec experience

DevSecOps

Agile

Tools

ISM

DSPF

ASD

DDG

CASG

Job description

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Our people apply undaunted curiosity, relentless ambition and boundless imagination to challenge convention and drive progress. Our commitments are underpinned by the belief that safety, collaboration and well-being are integral to success. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents.

Are you seeking a career that offers a healthy work-life balance, a friendly company culture, and engagement with a supportive community?

We’ll inspire and empower you to deliver your best work so you can evolve, grow and succeed – today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities.

People are our greatest asset, and we offer a competitive package to retain and attract the best talent.

Our values stand on a foundation of safety, integrity, inclusion and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees.

Amentum is proud to be an Equal Opportunity Employer, please refer to our Enterprise Agreement and www.fairwork.gov.au for more information.

Role Title: Security Dev Sec Ops

Role Description:

Interprets information assurance and security policies and applies these to manage risks and where necessary is able to generate equivalent or alternate controls where required.

Provides guidance and generates solutions that deliver operational information management outcomes across security domains (CDS) that adhere to contemporary information assurance architectures, strategies, policies, standards and guidelines.

Plans, organises and conducts information assurance reviews in support of accreditation of complex domains areas, across functional areas, across multiple classification domains and across the supply chain.

Contributes to the development of policies, standards and guidelines for the on-going management of these areas in an operational context throughout the capability life cycle.

Provides authoritative advice on implementing compliance controls in products, services and systems.

Investigates breaches and recommends control improvements. Maintains an inventory of legislated data, conducts risk assessments and specifies necessary changes.

Ensures formal requests and complaints are handled following procedures. Prepares and submits reports to relevant authorities, ensuring all compliance requirements are met.

Essential Requirements:

• Minimum 8-10 years of experience in an information technology role with exposure to information security.
• Extensive experience with the ISM and Defence Security Policy Framework (DSPF).
• Experience working in leading cyber security initiatives within the Australian Signals Directorate (ASD), Defence Digital Group (DDG) or Capability Acquisition and Sustainment Group (CASG), within the Department of Defence Portfolio.
• Recent experience in authoring Defence ICT Security documentation for ICT systems that have successfully achieved ATO.
• Experience working with DevSecOps and Agile project delivery methodologies.
• Experience with Defence Strategic Networks.
• Experience with Defence Deployed Networks.

Required Security Clearance Level: NV1

Location: ACT

Weekly Hours: 40