Role Overview

Role Title: Cyber Security Team Lead

The Cyberspace Operations Systems Program Office (COSPO) acquires and sustains military cyberspace operations systems to support the ADF mission in cyberspace. The Cyber Security Manager is a member of the COSPO Engineering Support Team and works under the general guidance of the COSPO Deputy Chief Engineer. The Cyber Security Manager is responsible for leading a team focused on cyber security risk mitigations across multiple products internal to the COSPO; delivering support services, specialist advice and reporting against hardware/software vulnerability monitoring, cyber supply chain risk management, Defensive Cybersecurity, incident response and ad-hoc specialist consultation. The internal products are high risk, of smaller scale and complexity, with use cases different than traditional enterprise systems. The Cyber Security Team is small, requiring a wide breadth of skills and knowledge, rather than high volume throughput and strict roles supporting three Product Teams internal to COSPO. The member is accountable for ensuring they have knowledge of and compliance with relevant financial and legislativeframeworks, Commonwealth Government decision-making, and Defence's directives and policy requirements.

Key Responsibilities

- Conduct of vulnerability management activities, stakeholder communications and reports across all COSPO Products (both SW and HW components)
- Maintenance and execution of the Cyber Supply Chain Risk Management Plan
- Management and further development of both SIEM capabilities and SIEM analysts.
- Leadership of threat hunt planning, execution and reporting
- Cyber security operations of COSPO products including development and maintenance of Standard Operating Procedures
- Cyber Security stakeholder engagement within broader Defence Digital Group and Defence Department




- Leadership of one Cyber Security Specialist and technical control of Product Team GRC personnel
- Facilitation of internal Cyber Security training up to 80 people within COSPO
- Maintaining contemporary knowledge of strategic cyber security issues and threats, and subsequent education or awareness briefings for COSPO personnel
- Specialist ICT security advice into Product Team design, development and test activities
- Incident Response Plan execution and maintenance (IRP)

Qualifications

Essential:

- Cert IV (or equivalent) in either Cyber Security or Intelligence Operations or Security and Risk Management.
- Certified Protected® Practitioner (mandatory for all COSPO personnel - can be completed upon engagement).

Desirable:

- Degree qualification in Cyber Security
- CISM, CISSP, SSCP or other equivalent certifications
- Specialist cyber security certifications (e.g. SANS or equivalent)
- Information security Registered Assessors Program (IRAP) certification

Skills and Experience

Essential:

- ICT Security Governance, Risk and Compliance (GRC) or equivalent experience
- Open-source intelligence analysis, risk assessments and technical reporting
- Security Operations Center (SOC)-like Cyber Incident response, as both an analyst and manager
- Threat modelling, threat hunt planning and execution
- Security Information and Event Management (SIEM) optimisation and tuning
- Supply chain risk assessments and reporting
- Vulnerability assessment and management

Desirable:

- Have held a Security Operations Centre (SOC) role
- MITRE ATT&CK; experience
- SCAP, STIG and CIS standards experience
- Agile / Scrum experience
- DevSecOps and CI/CD pipeline security
- Network and host digital forensics
- SIEM design and deployment
- Containerisation security controls and logging
- Australian military or Department of Defence experience

#J-18808-Ljbffr

📌 Cyber Security Team Lead (Canberra)
🏢 Amentum
📍 Canberra