Role Title

Lead Cyber Specialist (Cyber Vulnerability Specialist)

Location

Canberra, ACT

Working Arrangement

Onsite | 5 days per week in the office

Clearance required

Must hold or be able to obtain a Negative Vetting 1 (NV1) security clearance.

Company overview

The Department of Foreign Affairs and Trade (DFAT) is seeking a Lead Cyber Specialist to join the Cyber Threat and Vulnerability Management Section within the Cyber Security, Cloud and Networks Branch of the Information Management and Technology Division. The team is responsible for identifying and managing cyber threats and vulnerabilities impacting DFAT's global ICT environment and diplomatic operations.

Job Description

DFAT is seeking an experienced Cyber Vulnerability Specialist to provide specialist cyber security capability supporting vulnerability management across the department's ICT environment. This role will focus on identifying, assessing, prioritising and communicating cyber security risks across infrastructure, applications and secure development pipelines.
The successful candidate will provide contextualised vulnerability assessments and risk-based recommendations that support informed decision-making and help safeguard DFAT's diplomatic, operational and mission-critical functions in an evolving threat landscape.
This opportunity is aligned to a Lead (EL1 equivalent) level and offers an initial 12-month contract with extension options.

Duties and Responsibilities

- Identify, analyse and prioritise cyber security vulnerabilities across systems, applications and development pipelines.
- Conduct risk-based vulnerability assessments and provide actionable security advice.
- Support DFAT's vulnerability management activities across enterprise environments.




- Perform vulnerability scanning, validation and management using Tenable platforms.
- Conduct log analysis, event correlation and cyber security investigations using Splunk.
- Assess and communicate cyber security risks to technical and non-technical stakeholders.
- Collaborate with cyber security operations, infrastructure teams, application delivery teams and external partners.
- Contribute to reducing cyber risk and promoting secure-by-design practices across the department.
- Support vulnerability management activities relating to infrastructure, applications and secure development environments.
- Engage with stakeholders and provide decision-ready advice on cyber security risks and remediation priorities.

Education/Certifications required

- Relevant tertiary qualification in Cyber Security, Information Technology, Computer Science or a related discipline, or equivalent demonstrated experience.
- Industry certifications such as CISSP, GIAC, OSCP or equivalent are highly desirable.

Knowledge/Skills required

Essential

- Demonstrated experience in cyber vulnerability management, including assessment and prioritisation of CVEs within complex enterprise environments.
- Proven ability to conduct risk-based vulnerability assessments and provide actionable security advice.
- Strong experience with Tenable, specifically on-premises Tenable platforms, for vulnerability scanning,



validation and management.
- Demonstrated proficiency with Splunk for log analysis, query scripting, event correlation and cyber security investigations.
- Excellent written and verbal communication skills with the ability to translate complex technical concepts into clear business-focused advice.
- Experience working within Australian Government or other highly regulated environments.

Desirable

- Experience in Application Security (AppSec), including secure development pipelines and application-layer vulnerabilities.
- Experience assessing software supply chain and open-source dependency risks.
- Familiarity with secure CI/CD pipelines and DevSecOps practices.
- Experience engaging with senior stakeholders and contributing to cyber security governance activities.

Employment perks

- Initial 12-month contract.
- Two potential 12-month extension options.
- Opportunity to work within a critical cyber security function supporting Australia's diplomatic and global ICT environment.
- Exposure to complex enterprise-scale cyber security challenges.
- Collaborative engagement with security operations, infrastructure, application delivery and external partner teams.
- Lead-level opportunity within a high-profile Federal Government department.

Diversity and Inclusion

We value diversity and are committed to creating an inclusive environment for all employees.

Veterans

Defence and Federal Government industry experience is highly desirable We strong encourage veterans and individuals with Defence experience to apply. Your unique skills and background are highly valued, and we are committed to supporting your transition into this role.

#J-18808-Ljbffr

📌 Lead Cyber Specialist (Canberra)
🏢 Client 1
📍 Canberra