We are seeking a Cyber Operations Security Expert as belowRole/s: EL1 Cyber Operations Security ExpertThe Cyber Operations Security Expert, will undertake technical cyber security activities underthe leadership of the Director of Cyber Security Operations.
The Cyber Operations SecurityExpert,must possess and demonstrate technical competency in areas of cloud security (Azure/AWS), endpoint and network security, threat intelligence and hunting, data loss prevention, vulnerability management, and incident response.
The Cyber Operations SecurityExpert,will be required to support and contribute to the protection of the Agency's systems, users, and data, to support NDIA's objectives to "build a world-leading National Disability Insurance Scheme".
As part of the Cyber Security Operations team, the role will help ensure that NDIA has the capability to build and protect cyber-resilient information technology platforms and support strategic objectives.ResponsibilitiesThe role will involve the key responsibilities:Lead proactive monitoring, investigation, and mitigation of security incidents within security tools (including Sentinel, Microsoft Defender 365 stack, Azure Security Centre, Splunk )Analyse security event data and identifying suspicious/malicious activity from networks and systemsLead incident response activities including initial and detailed investigation, computer forensics,



chain of custody implicationsRespond to events and incidents using established Standard Operating Procedures (SOPs)Be a point of escalation for complex incidents and act as a subject matter expert in areas of cloud security, active defence, and threat mitigationDevelop and manage phishing simulationsResearch current and evolving threats and vulnerabilities to the Agency's threat landscapeConduct log analysis and develop visualisation and reporting within SplunkIdentify critical data sources required by cyber for ingestion and normalisation into the SIEMsCollaborate with Security Operations and IT engineers to implement security controlsSupervise, mentor and develop junior staff, and identify areas of people, process, and defensive tool improvementProduce and disseminate incident response reports, activity reports, and intelligence and threat briefsAbout the CandidateDemonstrated familiarity with log aggregation and Security Incident and Event Management (SIEM) systemsKnowledge of the Information Security Manual (ISM) and cyber security concepts.Demonstrated experience implementing and using Incident Response Frameworks (NIST SP ****** Incident Handling Guide, Mitre Frameworks)Formal tertiary qualifications or industry certifications in a cyber security related field (e.g.Azure/AWS, Splunk Certified)Cyber Operations Security Expert • Melbourne, VIC, AU
#J-*****-Ljbffr

📌 Cyber Operations Security Expert (Melbourne)
🏢 Everi Pty
📍 Melbourne