Engineer - Vulnerability Management

* ASIC is seeking a full time Engineer- Vulnerability Management to join their Transformation Office Digital, Data and Technology Team
* Experience with Vulnerability Management, threat response, remediation actions, mitigations, workarounds, and patching prioritisation will be highly beneficial
* Permanent position based in Sydney
A future with ASIC means that your work will contribute to ASIC's vision for a fair, strong and efficient financial system for all Australians. We value what you will bring. We value those with sharp, analytical minds and are open to challenging the way things are done.
The team
Information Technology Services provides a wide range of IT facilities and support services to ASIC. We are embarking on major technology projects that will transform our business and continue our significant technology transformation in several areas such as virtualisation, mobility and cloud. We make use of the latest technology with an increasing focus on data sharing and analytics which will make ASIC a 'best in class' regulator supporting the Australian financial markets.
The role
* Work collaboratively with a cross section of technical and cyber specialist staff to create rolling action plans to reduce ASIC's vulnerability exposure across our technology platforms
* Lead and coordinate the teams to perform the patching activities and applying security vulnerability remediation changes
* Provide ongoing management reporting on ASIC's vulnerability status
* Manage the monthly operating System and infrastructure patch cycles, ensuring systems are kept up-to-date and secure
* Responding to BAU Security and Patch Management incidents
* Provide both internal and customer centric security vulnerability reports, with possible remediation timelines
* Recommend and deploy changes via the agreed change management process as required
* Patching outside of core business hours will be necessary to accommodate certain types of infrastructure updates and to cater for customer maintenance windows. This could involve weekends or after-hours during the week
* This is a hands-on role requiring strong automation and coding skills
About you
* Relevant tertiary IT qualifications and certifications.
* Strong knowledge of the latest Cyber Security infrastructure technologies and best practices.
* Understanding of Vulnerability Management frameworks, CVSS, CVE and MITRE ATT&CK
* Familiarity with ASD Essential 8 and NIST Cybersecurity Framework.
* Strong experience with Puppet Enterprise is a must
* Strong experience with managing puppet code in GIT Repos
* Strong understanding of patching process for Windows and Linux Operating systems
* Good understanding of core Cloud services from AWS and Azure
* Experience with Terraforms, CloudFormation, Windows PowerShell and Unix/Linux scripting.
* Experience with writing comprehensive technical documentation and creation of dashboards.
* Experience with constructing and presenting high-level presentations.
* Experience using Vulnerability Management tools and technologies such as Rapid7 IVM, Qualys, Tenable, etc.
About ASIC
ASIC's remit is one of the broadest of regulators across the world.
ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system.
Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.
Through Moneysmart, we aim to improve the skills and knowledge of Australians and provide information and tools to help them in their decision making.
A future with ASIC means that your work will contribute to achieving ASIC's vision for a fair, strong, and efficient financial system for all Australians.
ASIC is committed to a providing a diverse and inclusive workplace where the very best talent in Australia chooses to work. Indigenous Australians are encouraged to apply as well as applicants from all backgrounds and with different abilities
To work with us, you need to be an Australian citizen, and be prepared to complete an ASIC Suitability and Baseline Assessment which is issued ASIC's Security team.
View the position description for more information or click ‘apply' to start your application.
Applications for this role will close at 11:59pm on 22nd March, 2024