- Location: Canberra, ACT
- Application Closing Date: Sunday 18 October at 11:30pm AEDT

Classification APS Level 5 ($91,909 - $98,259)

APS Level 6 ($101,657- $114,239)

Employment Type

Ongoing & Non-ongoing (for a period of up to 24 months)

This role is being advertised as both ongoing and non-ongoing, with the employment type to be determined in negotiation with the preferred candidate and the PM&C; delegate.

Where a non-ongoing specified term is offered, this would be for a maximum period of two (2) years. If the initial contract is for less than 2 years, it may be extended or renewed once, up to the 2 year limit.

A non-ongoing offer may result in conversion to an ongoing offer of employment, however this must occur within 18 months from the opening date of this advertisement.

Flexible Work

At PM&C; we recognise the broad benefits of offering flexibility in how, when and where work is performed. We consider flexibility first from a starting position of ‘how can we make this work?’ and consider individual circumstances and operational requirements in making genuine attempts to establish mutually beneficial arrangements. Please reach out to the contact officer if you would like to explore what flexibility might look like for you, such as part-time work, variable start and finish times or working from home.

Who we are

PM&C;'s Digital Security and Workplace Operations Division (DSWOD) is in the exciting stage of establishing a new dedicated Cyber Security Operations Centre (CSOC) to uplift our cyber defence capabilities and enhance our ability to proactively detect and respond to cyber threats.

The Cyber Operations team forms part of the Digital, Security, and Workplace Operations Division. Our division delivers workplace and business services that support PM&C; and our shared service partners to operate effectively and deliver business outcomes. Our services span property, security, digital and information communications technology.

What you will do The Cyber Security Operations Centre Analyst supports the day-to-day operation of the CSOC by monitoring security events, analysing alerts and contributing to the investigation and response to suspicious activity and cyber incidents. Working as part of a collaborative, intelligence-led team, the analyst will use a modern Security Information and Event Management platform and a range of contemporary security tools to help protect departmental systems, information and services.

The role offers structured training, practical coaching and hands-on experience to build capability across alert triage, security monitoring, incident investigation, threat analysis and response processes. The successful candidate will be encouraged to develop their technical skills, contribute ideas and support continuous improvement while working with experienced cyber security professionals.





Key responsibilities

- Provide guidance to junior team members.
- Monitor security events and coordinate the triage, investigation and response to cyber incidents.
- Proactive system monitoring.
- Assist the SOC Team Lead with continuous improvement of SOC processes, tooling, and service delivery.
- Analyse cyber threat intelligence feeds to identify and respond to relevant indicators.
- Collaborate with ICT, cyber governance, executive and external stakeholders to ensure effective security operations.

What you will bring As an APS 5 Cyber Security Analyst, you have:

- Some experience in an IT, service desk or junior cyber security role, with an interest in building practical security operations capability
- Familiarity with, or a willingness to learn, security technologies such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and email security gateways
- A collaborative approach and the ability to provide practical guidance and assistance to junior colleagues or end users, while seeking advice when required
- An awareness of the Information Security Manual and Essential Eight maturity model, with an interest in developing an understanding of how these are applied in practice
- Basic familiarity with YARA, Python, PowerShell or KQL - or a willingness to develop these skills - would be desirable
- Relevant qualifications, technical training or industry certifications would be desirable but are not essential.

As an APS 6 Cyber Security Analyst, you will have:
- Experience or an interest in monitoring security events and contributing to the triage, investigation, escalation and coordinated response to cyber incidents, with a willingness to exercise sound judgement in a fast-paced operational workplace
- An understanding of, or an interest in, developing, maintaining and exercising practical incident response playbooks, and using lessons learned to improve team readiness and operational processes
- The ability to contribute to investigations escalated by junior analysts, analyse available evidence and support the development of proportionate containment, remediation and recovery options
- A collaborative and supportive working style, with an interest in mentoring junior analysts through clear guidance, constructive feedback and practical coaching that helps build confidence and capability
- Some familiarity with relevant languages or query tools - such as YARA, Python,



PowerShell or KQL - or an interest in developing the ability to interpret and safely adapt scripts, rules or queries that support investigations and detection activities
- An awareness of the Information Security Manual and Essential Eight, together with an interest in applying government cyber security guidance pragmatically to strengthen organisational resilience
- A genuine interest in cyber security, continuous learning and public service, with the initiative to raise emerging issues, balance competing priorities and contribute ideas that support team performance
- Relevant tertiary qualifications, technical training or industry certifications would be desirable but are not essential.

In line with our dedication to an inclusive and safe workplace culture we are seeking candidates who are respectful of people’s unique differences, backgrounds and cultures (including Aboriginal and Torres Strait Islander culture) particularly when communicating and working together.

Eligibility

- Under section 22(8) of the Public Service Act 1999, employees must be Australian citizens to be employed in the APS unless the Agency Head has agreed otherwise, in writing. At PM&C; to be eligible for this position you should be an Australian Citizen by the completion of the recruitment process, except under exceptional circumstances.
- The successful candidate must be able to obtain and maintain a security clearance, or hold a current security clearance of an appropriate level.
- The successful candidate will be assessed through our pre-employment screening checks, such as an Australian Criminal History Check, and will normally be subject to a six-month probation period if new to the APS or has not yet completed their probation period elsewhere in the APS.

Security Clearance Required Negative Vetting Level 1 (Secret)

How to apply

Submit an online application through the PM&C; Current Opportunities by 11:30pm AEDT on Sunday 18 October.

As part of your application you will need to provide:

- Your resume (maximum three pages)
- A ‘one page pitch (no more than 650 words)’ telling us how your skills, knowledge, experience and qualifications make you the best person for the job and to perform at the relevant classification level.

You are encouraged to refer to the Candidate Pack and the relevant classification level of the PM&C; Performance Model to assist you in drafting your one page pitch. You may also refer to the APSC resource Cracking the Code for further guidance and assistance on applying for jobs in the Australian Public Service.

Contact Officer

Michael Taylor on (02) 6228 6570 or [email protected]

Please Note – This is an unclassified web based recruitment system so your application must not contain any classified or sensitive information. This includes in your one page pitch and resume.

📌 Cyber Security Analyst, Enterprise Technology and Security Branch (Canberra)
🏢 Department of the Prime Minister and Cabinet
📍 Canberra