Principal Cyber Security Specialist, Queensland Fire Department

Principal Cyber Security Specialist, Queensland Fire Department Brisbane - North, Australia

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

• Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
• Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
• Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.
• Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation, reporting and other standard operating processes & procedures.
• Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.
• Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of new and emerging technologies.
• Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.
• Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.

Mandatory requirements

• Participation in on-call arrangements and out of hours work as required

Highly desirable requirements

• Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
• 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions: Enterprise Firewalls & IDS/IPS
• Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
• Networking & VPN solutions
• Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as: Email & Web Content Filtering
• Identity & Access Management
• Multifactor Authentication & RADIUS
• Cloud based services such as AWS & Azure.
• SIEM & SOAR
• EDR & NDR.
• PKI
• Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements

• Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.
• Experience in the following technology domains with a background in one or more: Security Assurance Testing (Pen testing).
• Software Development and integration
• Infrastructure (server operating systems, virtualisation, database, storage)
• Automation & Orchestration
• Desktop operating system management
• Mobility (Apple, Windows, MDM's)
• Knowledge of ITIL and Dev/Sec/Ops

Additional information

• Applications to remain current for 12 months

#J-18808-Ljbffr