Security Engineer / Analyst

Are yoiu looking for stability in a role that will still technically challenge you?The RoleThe role will conduct incident response and maintain the team to ensure effective monitoring and coverage is maintained. Candidates for these roles must be highly experienced cyber security analysts and/or Security Engineers, have an operational mindset and can work within service management processes. They must have an advanced understanding of security operations and detection development processes and be able to develop documentation and playbook improvements. They will lead the collection and prioritisation of detection and alerting issues for later action and implementation into engineering objectives.LocationCanberra, Sydney - Canberra is priorityKey RequirementsEssential:

• Support Incident Response and Security Operations Centre function, including:

• Collaborate with System Admins to generate logs and develop incident use cases.
• Using existing SIEM tools, build alerts, dashboards and automated reports
• Provide day-to-day monitoring of SIEM data
• Initiate Incident Response activities as required
• Support the IT Security Team in preparing information briefs and reports;
• Support the maintenance of IT security guidelines and procedures; identify gaps and prepare updates as needed. Aid in modernising security awareness material;
• Contribute to IT system accreditation activities, as required;
• Apply DevSecOps principles to support the secure design, build and sustainment of IT capabilities; and
• NV2 security clearance essential.

• Relevant qualifications in Cyber Security and Information Technology.
• Experience working in a Government environment or systems.
• Knowledge of logging and detection architecture, security integration, and engineering processes.
• Skills in scripting and programming languages.
• Experience applying Govt IT security policies (e.g. ISM, PSPF and E8) and developing internal security policies or procedures;
• Demonstrated ability to communicate effectively, including concise writing skills;
• Experience in sustaining IT security systems, including vulnerability analysis tools
• Demonstrated technical aptitude in secure system design (including cloud and Windows environments);
• Understanding of the system accreditation process, per the ISM; and
• Relevant industry training or qualifications, such as GIAC, CISSP, etc.