SECURITY SPECIALIST 
    ​SCTY 4
    ​​ (PUBLISHED 28/12/21)

    RFQ-AGD2021599 Batch 6 SOW 32
    Major SFIA Level: SCTY 4
    Client: Attorney General's Department (AGD) 
    Location: Canberra, Sydney or Melbourne. Roles in Melbourne and Sydney will be expected to be able to travel to Canberra as required (subject to COVID-19 restrictions).
    Start Date: ASAP
    Contract: 12 and 24 month contracts will be considered/negotiated. 
    Part-time arrangements: will not be considered. 
    Clearance: Top Secret Positive Vetting (TSPV) preferred, NV2 accepted

    ​Closes:  Monday 7th February 2022 10am
    ​
    ​Role Description:
    The resource will be required to represent projects being delivered by the Project Office for the continuous accreditation of classified systems. This will include the production of security documentation as specified by the ISM. The work will involve liaising with system and application managers, IT Security and ASD teams. The work will include a broad range of advisory services covering governance, risk, compliance and cyber topics within moderately-complex environments.

    Major Responsibilities:
    • Develop and maintain security documentation for ICT solutions being delivered by the project office in accordance with the ISM.
    • Update corporate information security documentation to reflect changes introduced by ICT solutions being delivered by the project office.
    • Conduct security risk assessments and provide advice and guidance on the application and operation of physical, procedural and technical security controls to support the longer-term business objectives and minimise the risk of internal and external security threats.
    • Assist project staff in designing and advising on the ICT security aspects of solutions that provide appropriate levels of resiliency, availability, reliability, and performance.

    Other Skills:
    • Primary skills and experience: Minimum four (4) year’s Information Security experience in the following areas of responsibility:
      a. Preparation and maintenance of system security documentation.
      b. Conducting information security risk assessments.
      c. Providing advice and guidance on the application and operation of physical, procedural and technical security controls.
      d. Assisting in designing of ICT security aspects of solutions to provide appropriate levels of resiliency, availability, reliability, and performance.
    • Secondary desirable skills and experience in any of the following technology areas:
      a. Software development security (DevSecOps).
      b. Cloud-based security solutions.
      c. Security of virtualisation products (VMware vSphere, VMware vRealize Automation, VMware Horizon and/or Citrix Virtual Apps and Desktops).
      d. Containerisation security (Kubernetes and/or OpenShift).
      e. Securing Microsoft Windows products.
      f. Cisco networking solutions security considerations.
    • Desirable Qualifications (any):
      a. Tertiary qualifications in Information / Cyber Security
      b. Tertiary qualifications in ICT or Computer Science;
      c. Diploma of IT; and/or
      d. Information / Cyber Security certifications (CISM, CISSP etc).

    SFIA Skills Required:
    • SCTY 4
    ​Security Clearance:
    Minimum of a current NV2 clearance is required to be held by candidates to apply for this position. Candidates with current or recently held (and able to be re-activated) TSPV clearances will be more highly regarded. All successful candidates will need to hold or upgrade to a TSPV prior to commencement of their role and it should be noted, this can be a lengthy process. Candidates that consider themselves eligible to gain a TSPV should only apply. In order to assess this, please consider information given in the link below: https://www.protectivesecurity.gov.au/sites/default/files/pspf-persec-12-eligibility-suitability-personnel.pdf

    ​For information on what to submit, including the selection criteria you will need to address, please download the full RFQ below.

    SECURITY SPECIALIST 
    ​SCTY 5
    ​​ (PUBLISHED 28/12/21)

    RFQ-AGD2021599 Batch 6 SOW 33
    Major SFIA Level: SCTY 5
    Client: Attorney General's Department (AGD) 
    Location: Canberra, Sydney or Melbourne. Roles in Melbourne and Sydney will be expected to be able to travel to Canberra as required (subject to COVID-19 restrictions).
    Start Date: ASAP
    Contract: 12 and 24 month contracts will be considered/negotiated. 
    Part-time arrangements: will not be considered. 
    Clearance: Top Secret Positive Vetting (TSPV) preferred, NV2 accepted

    ​Closes:  Monday 7th February 2022 10am
    ​
    ​Role Description:
    The resource will be required to provide technical specialist services to manage and uplift the security posture of the organisation’s ICT systems. The work will include a broad range of services and applications covering Essential Eight, vulnerability management and incident response within highly-complex environments.

    Major Responsibilities:
    • Manage and monitor security applications such as endpoint security and patching systems, and perform incident response and file inspection activities
    • Perform and analyse vulnerability scans, and work with teams to prioritise and mitigate risks.
    • Manage and maintain PKI and CA services, including certificate management.
    • Provide cyber security advice and, and conduct information security risk assessments

    Other Skills:
    • Primary skills and experience: Minimum six (6) year’s Information Security experience in the following areas of responsibility:
      a. Conducting vulnerability management.
      b. Managing security applications such as endpoint protection.
      c. Providing incident response and file inspections across multiple platforms.
      d. Implementing technical controls to meet Essential Eight and ISM compliance.
    • Secondary desirable skills and  experience in any of the following technology areas:
      a. Tenable Nessus
      b. Splunk/Sentinel
      c. Software development security (DevSecOps).
      d. Cloud-based security solutions.
      e. Security of virtualisation products (VMware vSphere, VMware vRealize Automation, VMware Horizon and/or Citrix Virtual Apps and Desktops).
      f. Containerisation security (Kubernetes and/or OpenShift).
      g. Securing Microsoft Windows products.
      h. Cisco networking solutions security considerations
    • Desirable Qualifications (any):
      a. Tertiary qualifications in Information / Cyber Security
      b. Tertiary qualifications in ICT or Computer Science;
      c. Diploma of IT; and/or
      d. Information / Cyber Security certifications (SANS/GIAC, OSCP, CISSP etc.).

    SFIA Skills Required:
    • SCTY 5
    ​Security Clearance:
    Minimum of a current NV2 clearance is required to be held by candidates to apply for this position. Candidates with current or recently held (and able to be re-activated) TSPV clearances will be more highly regarded. All successful candidates will need to hold or upgrade to a TSPV prior to commencement of their role and it should be noted, this can be a lengthy process. Candidates that consider themselves eligible to gain a TSPV should only apply. In order to assess this, please consider information given in the link below: https://www.protectivesecurity.gov.au/sites/default/files/pspf-persec-12-eligibility-suitability-personnel.pdf

    ​For information on what to submit, including the selection criteria you will need to address, please download the full RFQ below.