Senior Security DevSecOps Engineer – Defence ICT/ATO

Amentum company; Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

Amentum seeks an experienced Security Dev Sec Ops professional to interpret information assurance policies, apply controls, and support accreditation across complex Defence ICT environments in Canberra. The role requires significant security program leadership, policy development, and risk mitigation collaboration with multiple agencies.

Ideal candidates will bring 8–10 years in IT with strong DevSecOps and Agile delivery experience, and familiarity with DSPF/ISM frameworks, delivering secure

Qualifications

• Minimum 8–10 years of experience in an information technology role with exposure to information security.
• Extensive experience with the ISM and Defence Security Policy Framework (DSPF).
• Experience working in leading cyber security initiatives within ASD, DDG or CASG in the Defence Portfolio.
• Recent experience authoring Defence ICT Security documentation for ICT systems with ATO.
• Experience with Defence security networks and deployment environments.

Responsibilities

• Interpret information assurance and security policies and apply controls to manage risk.
• Provide guidance and solutions for information management across security domains in line with policies and standards.
• Plan and conduct information assurance reviews for accreditation of complex domains and supply chain scenarios.
• Develop and refine policies, standards and guidelines for ongoing management in operational contexts.

Skills

InfoSec experience

DevSecOps

Agile

Tools

ISM

DSPF

ASD

DDG

CASG

Job description

Amentum seeks an experienced Security Dev Sec Ops professional to interpret information assurance policies, apply controls, and support accreditation across complex Defence ICT environments in Canberra. The role requires significant security program leadership, policy development, and risk mitigation collaboration with multiple agencies.

Ideal candidates will bring 8–10 years in IT with strong DevSecOps and Agile delivery experience, and familiarity with DSPF/ISM frameworks, delivering secure