You will operate as a senior technical specialist within the Security Operations Centre, providing expert-level advice, hands-on engineering and incident response leadership across QFD's security infrastructure.

You will investigate and resolve complex, escalated security incidents, drive continuous improvement of SOC capability, and mentor analysts through technically demanding investigations, ensuring the department's information assets remain secure, resilient and compliant with relevant standards and legislative requirements.

Responsibilities

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

- Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
- Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
- Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery of business applications and services.
- Drive the continual improvement of the Security Operations Centre services, including improved infrastructure administration, monitoring, automation and streamlining, investigative practices, vulnerability assessment and remediation,



reporting and other standard operating processes & procedures.
- Prioritise team workload, mentoring analysts and providing training and guidance through complex incidents.
- Continually expand knowledge of developments and trends within the network and information security industry in order to evaluate the benefit and applicability of current and emerging technologies.
- Build and maintain effective working relationships by communicating and negotiating with information management and information communication technology professionals, and external stakeholders to promote sound information security practices throughout the organisation.
- Participate as an active team member of the branch and directorate in the development of operational plans, information and communication technology strategies and security infrastructure.

Mandatory requirements
- Participation in on-call arrangements and out of hours work as required

Highly desirable requirements
- Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
- 4+ years of demonstrated experience,



with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions: Enterprise Firewalls &
- IDS/IPS
- Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
- Networking &
- VPN solutions
- Demonstrated experience, in the effective configuration, support and administration of enterprise security solutions, such as: Email &
- Web Content Filtering
- Identity &
- Access Management
- Multifactor Authentication &
- RADIUS
- Cloud based services such as AWS &
- Azure.
- SIEM &
- SOAR
- EDR &
- NDR.
- PKI
- Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements
- Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.
- Experience in the following technology domains with a background in one or more: Security Assurance Testing (Pen testing).
- Software Development and integration
- Infrastructure (server operating systems, virtualisation, database, storage)
- Automation &
- Orchestration
- Desktop operating system management
- Mobility (Apple, Windows, MDM's)
- Knowledge of ITIL and Dev/Sec/Ops

Additional Information

- For further information regarding the role or to apply please click on the APPLY ONLINE button below
- Applications to remain current for 12 months

Occupational group IT &

- Telecommunications

📌 Principal Cyber Security Specialist (Brisbane)
🏢 Queensland Government
📍 Brisbane