Australian Department of Parliamentary Services – Canberra ACT

The Department of Parliamentary Services (DPS) supports the operation of the Australian Parliament by providing secure, reliable and effective ICT services across Australian Parliament House (APH). Within the Information Services Division, the Cyber Security Branch protects DPS and APH systems, information and users from cyber security threats through governance, assurance, engineering, monitoring, detection and response activities.

The role sits within the Cyber Security Operations Section and leads the department’s Cyber Hunt and Threat Emulation (CHATE) capability. CHATE provides specialised offensive security, cyber hunt, penetration testing, red team and threat emulation services that help DPS identify and remediate security weaknesses before they can be exploited.

As the Assistant Director Cyber Hunt and Threat Emulation, you will manage the day-to-day operation of the CHATE function, including work planning, prioritisation, staff guidance, quality assurance and delivery of agreed cyber security outcomes. The role scopes, plans, manages and undertakes cyber hunt, penetration testing, red team, threat emulation and other technical security assurance activities across networks, applications, cloud services, end-user environments and enterprise platforms.

The role works closely with CSOC analysts, cyber engineering, detection engineering, cyber threat intelligence, project delivery teams, system owners, service providers and senior stakeholders. It supports the security accreditation process by identifying suitable candidates for penetration testing and related assurance activities, providing expert technical advice, and recommending practical remediation, mitigation or compensating controls.





This is a unique opportunity to lead and shape a hands‑on offensive security and hunt capability in a nationally significant parliamentary environment. The successful candidate will help mature CHATE services, uplift frameworks and methodologies, and directly improve DPS’s ability to find, understand and reduce cyber risk across complex and sensitive technology environments.

Who we are looking for

We are looking for an experienced, technically credible and practical cyber security professional who can lead offensive security and hunt activities, manage sensitive engagements, and provide transparent advice on vulnerabilities, threat actor tradecraft and security control weaknesses. The ideal candidate will be curious, disciplined and collaborative, with the judgement to balance technical depth, operational risk, stakeholder confidence and business impact.

The successful candidate will demonstrate:

- experience leading or managing a technical cyber security function, including work planning, prioritisation, staff guidance, quality assurance and delivery of outcomes in a complex operating environment;
- demonstrated experience planning, scoping and conducting penetration testing, cyber hunt, red team, threat emulation or similar technical security assurance activities across enterprise technology environments;
- strong technical knowledge of common vulnerability classes, exploitation methods, operating systems, networks, web applications, cloud services, security controls and the tools and methodologies used to assess them;
- the ability to analyse threat intelligence,



vulnerability information, technical findings and operational context to assess exposure, prioritise activity and provide practical remediation or mitigation advice;
- well-developed written and verbal communication skills, including the ability to prepare clear technical reports, rules of engagement, permission documentation, briefings and recommendations for technical and non-technical audiences;
- a continuous improvement mindset, with the ability to develop frameworks, methodologies, procedures, tooling and reporting practices that mature CHATE services and support broader Cyber Security Branch objectives.

A minimum of five years’ relevant cyber security experience, or demonstrated equivalent experience, is required. Relevant industry certifications or equivalent experience is desirable. Tertiary qualifications in information technology, computer science, cyber security or a related discipline are also desirable. Experience with Microsoft Azure, Microsoft 365, hybrid cloud environments, scripting, red team activities, physical security assessment, social engineering, MITRE ATT&CK;, the cyber kill chain or the diamond model would be highly regarded.

Job Specific Requirements

The successful applicant will be required to obtain and maintain a Negative Vetting 1 (Confidential/Highly Protected/Secret) security clearance.

At DPS, we are committed to building a diverse and inclusive workplace that ensures all our people can contribute to our shared purpose. We encourage applications from Aboriginal and Torres Strait Islander people, people with disability, people with caring responsibilities, people who identify as LGBTQIA+, people from cultural and linguistically diverse backgrounds, people who identify as neurodivergent, and mature aged people.

#J-18808-Ljbffr

📌 Cyber Hunt and Threat Emulation (Canberra)
🏢 Australian Department of Parliamentary Services
📍 Canberra