Profectus is seeking an experienced Lead CAASM Specialist (runZero) to administer and sustain a Cyber Asset Attack Surface Management capability within an Australian Government agency. You will be responsible for the runZero platform and its integrations, maintaining reliable enterprise-wide asset visibility as part of a cyber sustainment team. The work covers platform administration and upgrades, integration with security, network, cloud and identity data sources, asset data reconciliation and governance reporting.

Key Responsibilities

- Administer, maintain and optimise the runZero CAASM platform, including configuration, upgrades and troubleshooting
- Monitor platform health, availability and operational performance
- Build and support integrations with enterprise security, network, cloud, identity and asset data sources
- Write and maintain logic to match unauthenticated network fingerprints with authenticated data from internal systems
- Reconcile and deduplicate asset records to improve data quality
- Identify unknown or unmanaged assets across the enterprise network
- Validate network segmentation and trace subnets to confirm asset coverage
- Maintain operational documentation and procedures, and contribute to continuous service improvement
- Produce governance, assurance and reporting outputs
- Contribute to vendor, licence and service management activities

Required Experience

- Administering and supporting runZero or a similar CAASM platform, including configuration, monitoring, upgrades and troubleshooting
- Managing platform integrations,



data sources and system connectivity
- Solid knowledge of asset discovery and cyber asset visibility concepts
- Strong grasp of operating systems, networking and cloud environments, including core networking protocols
- Network segmentation validation, unauthenticated network fingerprinting and subnet tracing
- Writing matching logic for asset data reconciliation and deduplication
- Maintaining technical documentation, operational procedures and service support activities
- Strong analytical, problem-solving and stakeholder engagement skills

Desirable Experience

- REST APIs, webhooks and automation scripting (e.g. Python, PowerShell)
- Background in cyber operations, technology governance or risk management
- Working knowledge of the PSPF and the Information Security Manual (ISM)
- Vulnerability management, including discovery, scoring, prioritisation and remediation
- Exposure to a range of cyber security technologies
- Industry certifications such as CISSP, CISM or CompTIA Security+, or runZero or related platform certifications

Security Clearance Requirements

- Must be an Australian Citizen
- Must have an AGSVA NV1 Security Clearance (or higher)

Working Arrangements

- Onsite
- Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

#J-18808-Ljbffr

📌 Lead CAASM Specialist (runZero) (Canberra)
🏢 Profectus
📍 Canberra