Cyber Assurance Specialist

About the role

Core Defence Australia (CDA) is seeking an experienced Cyber Assurance Specialist to support cybersecurity and information assurance activities within Australia's Defence environment. Based in either Melbourne or Canberra, the role suits a technically capable cybersecurity professional who understands ICT infrastructure, security frameworks and technical security controls. The person will work across complex ICT environments on security assurance, risk identification, technical assessments and the implementation of cybersecurity controls.

Key responsibilities

• Conduct cybersecurity assurance activities across Defence ICT systems and environments.
• Assess the implementation and effectiveness of technical security controls.
• Apply the Australian Government Information Security Manual (ISM), Essential Eight and relevant NIST frameworks.
• Review ICT infrastructure, networks, operating systems and cloud environments to identify security risks.
• Support the assessment, management and remediation of cybersecurity vulnerabilities.
• Contribute to security documentation, technical assessments and assurance reporting.
• Work with technical teams and stakeholders to support secure ICT outcomes.

Required profile

• A current, active Australian Government security clearance (mandatory).
• Degree in Computer Science, Systems Engineering, Information Technology or a related discipline, or equivalent practical experience.
• Demonstrated experience in cybersecurity, ICT assurance or technical security roles.
• Ability to obtain DCIAB certification; existing certification is advantageous but not essential.

Required skills

• Strong understanding of the ISM, Essential Eight and NIST frameworks.
• Practical experience with ICT systems administration, networking and technical security controls.
• Windows Server, Linux and other enterprise operating systems.
• Virtualisation (VMware or Hyper-V) and networking (TCP/IP, DNS, DHCP, VPNs).
• Cloud environments such as AWS, Azure or Google Cloud.
• Firewalls, endpoint protection, intrusion detection and other security technologies.
• Professional certifications such as CISSP, CISM or CISA are highly regarded.

Candidates apply through LinkedIn or by sending their CV to the company's recruitment contact.