Security DevSecOps Engineer

About the role

Amentum is seeking an experienced Security DevSecOps professional to interpret and apply information assurance and security policies across complex defence domains. The role involves managing risk, guiding operational information management, and ensuring compliance throughout the capability life cycle.

Key responsibilities

• Interpret and apply information assurance policies, generating equivalent or alternate controls where required.
• Provide guidance and solutions for operational information management across security domains (CDS) in line with contemporary architectures, strategies, policies, standards and guidelines.
• Plan, organise and conduct information assurance reviews supporting accreditation of complex, multi‑classification domains and supply‑chain components.
• Contribute to the development of policies, standards and guidelines for ongoing operational management throughout the capability life cycle.
• Offer authoritative advice on implementing compliance controls in products, services and systems.
• Investigate security breaches, recommend control improvements, maintain legislated data inventories and conduct risk assessments.
• Prepare and submit compliance reports to relevant authorities, ensuring all requirements are met.

Required profile

• Minimum 8‑10 years of experience in an information technology role with a focus on information security.
• Extensive experience with the ISM and Defence Security Policy Framework (DSPF).
• Recent experience authoring Defence ICT Security documentation that achieved Authority to Operate (ATO).
• Required security clearance: NV1.

Required skills

• DevSecOps methodologies.
• Agile project delivery.
• Defence Strategic Networks.
• Defence Deployed Networks.
• Knowledge of Australian Signals Directorate (ASD), Defence Digital Group (DDG) and Capability Acquisition and Sustainment Group (CASG) environments.