Senior Audit and Security Engineer TSPV

Paxus; Canberra; On-site; AUD 150,000 - 180,000; Full time

Job summary

Paxus is seeking an experienced Senior Audit & Security Engineer in Canberra to support development, uplift and ongoing operation of ICT security systems in a highly secure Federal Government environment.

This hands-on, senior role covers the full system/software lifecycle with continuous security monitoring and deployment support aligned to an established security plan. Clearance and organisational suitability assessment are required.

Qualifications

• Relevant ICT/security qualifications or equivalent experience.

Responsibilities

• Develop and operate security technologies across full lifecycle.
• Review current security controls and implement remediation activities.
• Build/operate monitoring to collect, analyse and respond to security logs and events.
• Deliver security automation solutions.
• Provide guidance on security control implementation.
• Assess system security documentation and configurations using vulnerability tools.
• Collaborate in multi-disciplinary teams and support technical leadership.

Skills

Information security

ICT security systems

Linux

Python

PowerShell

Windows/Linux OS

Security documentation

Security data pipelines

Security monitoring

Threat analysis

Education

Tertiary ICT/related field

Tools

Python

PowerShell

Linux

Job description

Paxus is seeking an experienced Senior Audit & Security Engineer (APS6 equivalent) to support the development, uplift and ongoing operation of ICT security systems within a highly secure Federal Government environment.

This is a hands-on, senior role across the full system/software lifecycle (requirements through to validation), combined with continuous security monitoring and deployment support aligned to an established security plan.

• Engagement: Contract
• Hours: 40 hours/week
• Clearance: TSPV required
• Star: ASAP / subject to clearances & onboarding requirement

What you'll be doing

• Develop and operate security technologies including (as applicable):
  Next-gen firewalls, IDS/IPS, WAF, content filtering, API security, DDoS protection, proxies, EDR/NDR, user behaviour analytics, SIEM, vulnerability scanning, secrets management, IAM, application whitelisting, device control, PKI and encryption solutions
• Review current security controls and implement remediation activities
• Build/operate monitoring capability to collect, analyse and respond to security logs and events
• Deliver security automation solutions
• Provide guidance to technical teams on security control implementation
• Assess system security documentation and configurations, including using vulnerability assessment tools
• Work collaboratively in multi-disciplinary teams and support technical leadership

Essential skills & experience

• Strong knowledge of information security principles, practices and technologies
• Proven experience developing and administering ICT security systems and applications
• Solid experience with Linux plus scripting/programming (e.g. Python, PowerShell)
• Experience administering Windows and/or Linux OS and core network services
• Strong documentation skills: building use cases, procedures, and technical documentation for security services
• Demonstrated capability in one or more: vulnerability management, EDR, user behaviour analytics, SIEM
• Experience managing security data pipelines
• Relevant tertiary qualification (ICT or aligned discipline)
• 5+ years in ICT (with 3+ years as a Security Engineer)
• Background in Defence / Intelligence / Government environments

Mandatory pre-engagement requirement (please read)

Successful candidates must be willing to complete an Organisational Suitability Assessment (OSA) prior to engagement, which includes a psychological assessment (questionnaire + interview). Commencement is dependent on a successful outcome.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.