IT Security Officer – Defence Prime (Permanent)

About the role

The ICT Security Officer will join a large defence prime’s Cyber Security team, supporting a next‑generation program. The role combines advisory, operational monitoring and assurance responsibilities across multiple environments.

Key responsibilities

• Act as a security champion and advisor across all system localities, engaging with business, contractor and Commonwealth staff.
• Communicate security risk, engineering and compliance information to stakeholders from individual contributors to senior leadership.
• Assist in designing, verifying and validating security‑enforcing functions within ICT environments, including Ground Segment and Labs.
• Conduct continuous monitoring, auditing, security testing and assurance across program systems, covering identity and access management, event logging, SIEM configuration/tuning, endpoint hardening, patch management verification, vulnerability scanning and secure data‑transfer compliance.
• Support incident response and digital forensics activities, and maintain documentation of environment configuration and operational processes.
• Provide on‑the‑job training and briefings on system and security topics, fostering a culture of safety, security and compliance.

Required profile

• Active Australian Security Clearance at NV1 level (ability to upgrade to NV2); candidates without this cannot be considered.
• Experience as a cyber security analyst, officer or system administrator working with deployed or test environments.
• Diploma or degree in cyber security, IT or a related discipline.
• Industry certifications such as CISSP, CRISC, CISM, SANS, ISO 27001 Lead Auditor/Implementer or formal DFIR training are highly desirable.
• Highly organised, task‑oriented self‑starter with strong communication and collaboration skills.

Required skills

• Identity and Access Management (IAM)
• Security Information and Event Management (SIEM) configuration and tuning
• Vulnerability scanning
• Patch management verification
• Endpoint hardening
• Security testing and continuous monitoring
• Digital forensics
• Auditing and secure data‑transfer compliance