Canberra, ACT | Australian Federal Government | NV1 Eligible | ContractJoin TLS Consulting and help protect Australia's national interests.
TLS Consulting is seeking experienced Cyber Security professionals to join our team in support of a major Australian Government client.
We have multiple long-term opportunities available for highly capable professionals who are passionate about cyber security, secure architecture and protecting critical government systems.
These are exceptional opportunities to contribute to nationally significant programmes while working alongside some of Australia's leading cyber security professionals.
Opportunities AvailableWe are seeking candidates for the following positions:
Principal Security Analyst / Cyber Advisor
Principal Security Engineer / Cyber Advisor (SIEM / SOAR)
Cyber Security Architect
These roles are based strictly in Canberra and require candidates who already hold an NV1 Security Clearance or are able to obtain one.
Principal Security Analyst / Cyber AdvisorAs a Principal Security Analyst, you will provide strategic cyber security advice across complex ICT initiatives, ensuring solutions comply with Australian Government security frameworks and best practice.
Key responsibilities include:
Conduct cybersecurity risk assessments and system security plans in alignment with the ISM and PSPF.
Perform certification and accreditation activities for government systems, ensuring compliance agency requirements.
Analyse vulnerabilities, threats, and security controls to determine residual risk against protective security obligations.
Develop and maintain accreditation documentation, including risk assessments, security plans, and compliance evidence.
Support audits, IRAP assessments, and security reviews to validate compliance with government security frameworks.
Technical skills candidates would need to have (including but not limited to) are listed below:
Security architecture and secure-by-design
Network security and enterprise infrastructure security
Cyber threat and risk assessment
Security monitoring and SIEM technologies
Cyber governance, compliance and assurance
Criteria
The buyer has specified that each candidate must provide a one page pitch to address all criteria specified.
This is equal to **** characters.
Essential criteria (to be addressed collectively with us)
Solution: The extent to which the potential supplier's response meets the Client's requirements as set out in the ATM documents.
(34%)
Ability to deliver: The extent to which the potential supplier demonstrates its capability and capacity to provide the requirements.
(33%)
Whole of life costs: The whole of life costs for the Client.
Evaluation includes the quoted price and any costs the Client will incur after accepting the potential supplier's response.
(33%)
Principal Security Engineer / Cyber Advisor (SIEM / SOAR)As a Principal Security Engineer, you will lead the design,



implementation and optimisation of enterprise security monitoring and automation capabilities that strengthen cyber detection and response.
Key responsibilities include:
Design and implement onboarding of log sources into the SIEM from cloud, on-premise, identity, endpoint, and network platforms
Develop and maintain parsing, normalisation, and data quality standards for logs
Build and maintain SOAR workflows to automate alert triage, enrichment, containment, and response
Integrate SIEM and SOAR platforms with security and IT tooling including EDR, IAM, ticketing, email, firewall, and threat intelligence systems
Develop, tune, and maintain high-quality detection rules aligned to threat detection capability, attacker techniques and organisational risk.
Create and maintain SOC playbooks and operational runbooks mapped to automated workflows
Reduce false positives and improve alert fidelity through continuous tuning and enrichment
Support incident response through log analysis, detection insights, and rapid rule development
Conduct detection gap analysis following cyber events, incidents, and threat intelligence updates
Maintain performance, reliability, and configuration of SIEM/SOAR platforms
Implement dashboards for monitoring and health checks for the SIEM/SOAR platforms
Develop and maintain explicit, accessible documentation for analysts, and capture system knowledge to support ongoing operations and knowledge transfer.
Define and report on key detection and response performance metrics (e.g. MTTD, MTTR, alert quality, automation or MITRE coverage) to assess effectiveness and inform continuous improvement initiatives.
Technical skills
Technical skills candidates would need to have (including but not limited to) are listed below:
Demonstrated hands-on experience as a tech lead implementing and administering enterprise SIEM platforms such as Microsoft Sentinel/Windows Defender, IBM Qradar, Elastic or Splunk with strong experience in automation, writing complex queries, correlation rules, parsers and developing SOC playbooks
Proven ability to optimise and integrate SIEM platforms, reduce false positives and improve alert quality
Criteria
The buyer has specified that each candidate must provide a one page pitch to address all criteria specified.
This is equal to **** characters.
Essential criteria (to be addressed collectively with us)
Solution: The extent to which the potential supplier's response meets the Client's requirements as set out in the ATM documents.
(34%)
Ability to deliver:



The extent to which the potential supplier demonstrates its capability and capacity to provide the requirements.
(33%)
Whole of life costs: The whole of life costs for the Client.
Evaluation includes the quoted price and any costs the Client will incur after accepting the potential supplier's response.
(33%)
Cyber Security ArchitectAs a Cyber Security Architect, you will design, review, test and assure the technical environment, solution designs and solution implementations in accordance with current and emerging security best practice.
You will contribute to the technical architecture and security policies and practices.
Key responsibilities include:
Design optimal security solutions for large and complex transformation programs
Provide guidance to project teams and system owners to achieve necessary endorsement and approvals
Produce security architecture documentation, including supporting approvals through technical governance forums.
Provide expert cyber technical security advice to other Client business units
Build and sustain strong relationships with a range of stakeholders including other teams, peers and colleagues across the Client's and other organisations
Ensure that appropriate action is taken to anticipate, communicate, investigate and resolve problems in systems and services
Technical skills candidates would need to have (including but not limited to) are listed below:
Enterprise security architecture and secure-by-design
Network security architecture
Cloud and hybrid security architecture
Security monitoring and observability architecture
Security assurance, risk and compliance architecture
Criteria
The buyer has specified that each candidate must provide a one page pitch to address all criteria specified.
This is equal to **** characters.
Essential criteria (to be addressed collectively with us)
Solution: The extent to which the potential supplier's response meets the Client's requirements as set out in the ATM documents.
(34%)
Ability to deliver: The extent to which the potential supplier demonstrates its capability and capacity to provide the requirements.
(33%)
Whole of life costs: The whole of life costs for the Client.
Evaluation includes the quoted price and any costs the Client will incur after accepting the potential supplier's response.
(33%)
Why TLS Consulting?
TLS Consulting is an Australian-owned consultancy delivering technology, cyber security and digital transformation services across the Federal Government.
Our people enjoy:
Long-term, meaningful Government engagements.
Exposure to complex national programmes.
Competitive remuneration.
Career progression and ongoing professional development.
Supportive leadership and a collaborative team culture.
Opportunities to work alongside recognised industry experts.
Apply NowIf you're looking to work on complex cyber security challenges that make a genuine difference to Australia's national security, we'd love to hear from you.

📌 Cyber Security Professionals (Multiple Opportunities) (Canberra)
🏢 TLS Consulting
📍 Canberra