Senior Security Engineer Vulnerability Assessors

Compas Pty Ltd; Canberra; On-site; AUD 140,000 - 180,000; Full time

Job summary

Compas Pty Ltd in ACT is seeking two Senior Security Engineers specializing in vulnerability assessment for a secure Australian Government ICT environment. You will assess and prioritise vulnerabilities, analyse complex threat profiles and strengthen security architecture through testing findings, risk analysis and control assessments.

These roles are onsite in Canberra, with a 12-month contract and possible 12-month extensions, commencing 1 February 2027.

Qualifications

• Must have demonstrated experience in vulnerability assessment and penetration testing findings analysis.
• Strong knowledge of security controls, threat analysis and risk management.
• Experience investigating security incidents and improving security architecture.

Responsibilities

• Identify, assess and prioritise security vulnerabilities from penetration testing, with actionable recommendations.
• Analyse threat profiles across devices and systems, conducting risk and impact assessments.
• Evaluate security controls, investigate suspected cyber attacks and support incident management.
• Review system designs and contribute to security policies, standards and risk management practices.

Skills

Vulnerability assessment

Penetration testing analysis

Security risk management

Threat analysis

Security controls

Job description

Job Title: Senior Security Engineer | Vulnerability Assessor - TSPV Compas is recruiting two Senior Security Engineers specialising in vulnerability assessment for a secure Australian Government ICT environment. Assess and prioritise security vulnerabilities, analyse complex threat profiles and strengthen security architecture through penetration testing findings, risk analysis and security control assessments.

Location: ACT
Work Arrangement: Onsite, with arrangements determined by operational requirements.
Contract Duration: 12 months, with possible 2 x 12-month extensions. Commencing 1 February 2027.
Security Clearance Requirement: Current TSPV clearance
Closing Date: 10:00am, 6 November 2026

Essential Tasks:

• Identify, assess and prioritise security vulnerabilities identified through penetration testing, providing actionable recommendations to strengthen ICT security.
• Analyse threat profiles across electronic devices and complex information systems, conducting security risk and business impact assessments.
• Evaluate security controls, investigate suspected cyber attacks and support security incident management and operational security improvements.
• Review systems designs, recommend security architecture enhancements and contribute to security policies, standards and risk management practices.

Key Criteria:

• Demonstrated experience in vulnerability assessment, penetration testing findings analysis and security risk management within complex ICT environments.
• Strong knowledge of security controls, threat analysis, information systems security and vulnerability remediation.
• Experience investigating security incidents, assessing business impacts and recommending improvements to security architecture.
• Ability to provide technical security advice, lead analytical activities and evaluate complex systems designs and associated risks.

About Compas: Compas Pty Ltd is a Canberra based wholly Australian owned, Recruitment and Services company that has been operating since 1987. We specialise in the provision of permanent, contract and temporary recruitment services, as well as specialised Consulting assignments.

YOUR APPLICATION WILL BE TREATED WITH THE STRICTEST CONFIDENCE: Due to the nature of this environment, candidates must hold a current TSPV clearance.