Queensland Fire & Emergency Services – Albion QLD

3d ago , from Fire and Emergency Services Queensland

The Queensland Fire Department (QFD) provides fire prevention, preparedness and response services to fire in the built and landscape environments, as well as scientific and specialist capabilities to Queensland communities. The QFD provides a multi-hazard emergency response, including road crash rescue, bushfire, hazardous material, technical and vertical rescue, severe weather incidents, remote and swiftwater rescue, and provides a number of functions supporting community safety outcomes.

The department encompasses Queensland Fire and Rescue (QFR), Rural Fire Service Queensland (RFSQ), as well as the broader department which work together to pre-empt, prevent, mitigate and manage the consequences of fires and other emergencies on Queensland communities and support our large volunteer membership across the state.

The QFD is an organisation that is committed to reframing the department’s relationship with Aboriginal and Torres Strait Islander peoples, communities, and organisations through activities identified in the QFD Reframing the Relationship Plan, contributing to Closing the Gap outcomes and building our cultural capability.

Cyber and Information Security is responsible for managing the department’s cyber security risk posture and response capability, safeguarding the confidentiality, integrity and availability of QFD's information and technology assets. The unit manages the agency's security roadmap, incident response, and information security requirements across a complex operational technology workplace, balancing risk management with the need to enable and advance frontline service delivery.





Reporting to the Director, Cyber and Information Security, you will operate as a senior technical specialist within the Security Operations Centre, providing expert-level advice, hands‑on engineering and incident response leadership across QFD's security infrastructure. You will investigate and resolve complex, escalated security incidents, drive continuous improvement of SOC capability, and mentor analysts through technically demanding investigations, ensuring the department's information assets remain secure, resilient and compliant with relevant standards and legislative requirements.

Mandatory requirements

- Participation in on-call arrangements and out of hours work as required

Highly desirable requirements

- Tertiary qualifications in Computer Science or equivalent and/or Information Security industry certifications such as CISSP, GIAC (GCED, GSOC, GCIH, GCTI, GCIA), CEH, OSCP, CCSP, CISM and security vendor specific certifications.
- 4+ years of demonstrated experience, with an advanced skill level, in the effective configuration, support and administration of the following types of enterprise security solutions:
- Enterprise Firewalls & IDS/IPS
- Application Delivery Controllers (Application Firewalls, Reverse Proxies, Load Balancers)
- Networking & VPN solutions

- Demonstrated experience,



in the effective configuration, support and administration of enterprise security solutions, such as:

- Email & Web Content Filtering
- Identity & Access Management
- Multifactor Authentication & RADIUS
- Cloud based services such as AWS & Azure.
- SIEM & SOAR
- EDR & NDR.
- PKI
- Microsoft Security Stack (including Sentinel and Defender)

Desirable requirements

- Experience in performing threat risk assessments utilising security and IT control frameworks such as NIST and ISO2700 series of IT security management best practices.

- Experience in the following technology domains with a background in one or more:
- Security Assurance Testing (Pen testing).
- Software Development and integration
- Infrastructure (server operating systems, virtualisation, database, storage)
- Automation & Orchestration
- Desktop operating system management
- Mobility (Apple, Windows, MDM’s)

- Knowledge of ITIL and Dev/Sec/Ops

Your part in the ongoing success of our department, in supporting key frontline services will see you responsible for a variety of work, including, but not limited to:

- Lead and conduct technical investigations of security infrastructure to resolve business service degradation and failures within agreed service levels.
- Provide technical expertise in the capacity planning, configuration management, administration, change management, documentation and support of security technologies.
- Contribute with technical breadth across mainstream IT technology components to provide input into and review/challenge the technical design, installation and configuration of technology services to enable the secure delivery

📌 Principal Cyber Security Specialist (Albion)
🏢 Queensland Fire And Emergency Services
📍 Albion