Senior Security Engineer

Profectus; Canberra; In loco; AUD 150.000 - 190.000; Tempo pieno

Descrizione del lavoro

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO).

The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.

Competenze

• Demonstrated experience leading the application and compliance of security controls within complex ICT environments.
• Proven experience developing ATO or security accreditation documentation, including System Security Plans
• Experience conducting security risk assessments, threat assessments and compliance reviews

Mansioni

• Manage and develop ICT system security activities across complex systems
• Lead the application and compliance of security controls and security operations procedures
• Develop and maintain accreditation documentation, including Concepts of Operations (CONOPs) and System Security Plans (SSPs)
• Achieve and maintain ATO for ICT systems
• Conduct security risk assessments, threat assessments and compliance reviews
• Work with ICT engineers, architects and security teams to agree controls and secure approvals
• Prepare executive briefs and security recommendations for senior management
• Communicate technical security matters clearly to technical and non-technical audiences
• Contribute to secure system design and operation

Conoscenze

Security controls

Risk assessment

Threat assessment

Accreditation docs

SSP development

Descrizione del lavoro

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO). The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.

Key Responsibilities

• Manage and develop ICT system security activities across complex systems
• Lead the application and compliance of security controls and security operations procedures
• Develop and maintain accreditation documentation, including Concepts of Operations (CONOPs) and System Security Plans (SSPs)
• Achieve and maintain ATO for ICT systems
• Conduct security risk assessments, threat assessments and compliance reviews
• Work with ICT engineers, architects and security teams to agree controls and secure approvals
• Prepare executive briefs and security recommendations for senior management
• Communicate technical security matters clearly to technical and non-technical audiences
• Contribute to secure system design and operation

Required Experience

• Demonstrated experience leading the application and compliance of security controls within complex ICT environments
• Proven experience developing ATO or security accreditation documentation, including System Security Plans
• Experience conducting security risk assessments, threat assessments and compliance reviews