Profectus is seeking an experienced Lead CAASM Specialist (runZero) to administer and sustain a Cyber Asset Attack Surface Management capability within an Australian Government agency.
You will be responsible for the runZero platform and its integrations, maintaining reliable enterprise-wide asset visibility as part of a cyber sustainment team.
The work covers platform administration and upgrades, integration with security, network, cloud and identity data sources, asset data reconciliation and governance reporting.
Key Responsibilities
Administer, maintain and optimise the runZero CAASM platform, including configuration, upgrades and troubleshooting
Monitor platform health, availability and operational performance
Build and support integrations with enterprise security, network, cloud, identity and asset data sources
Write and maintain logic to match unauthenticated network fingerprints with authenticated data from internal systems
Reconcile and deduplicate asset records to improve data quality
Identify unknown or unmanaged assets across the enterprise network
Validate network segmentation and trace subnets to confirm asset coverage
Maintain operational documentation and procedures, and contribute to continuous service improvement
Produce governance, assurance and reporting outputs
Contribute to vendor, licence and service management activities
Required Experience
Administering and supporting runZero or a similar CAASM platform, including configuration, monitoring, upgrades and troubleshooting
Managing platform integrations,



data sources and system connectivity
Solid knowledge of asset discovery and cyber asset visibility concepts
Strong grasp of operating systems, networking and cloud environments, including core networking protocols
Network segmentation validation, unauthenticated network fingerprinting and subnet tracing
Writing matching logic for asset data reconciliation and deduplication
Maintaining technical documentation, operational procedures and service support activities
Strong analytical, problem-solving and stakeholder engagement skills
Desirable Experience
REST APIs, webhooks and automation scripting (e.g. Python, PowerShell)
Background in cyber operations, technology governance or risk management
Working knowledge of the PSPF and the Information Security Manual (ISM)
Vulnerability management, including discovery, scoring, prioritisation and remediation
Exposure to a range of cyber security technologies
Industry certifications such as CISSP, CISM or CompTIA Security+, or runZero or related platform certifications
Security Clearance Requirements
Must be an Australian Citizen
Must have an AGSVA NV1 Security Clearance (or higher)
Working Arrangements
Onsite
Canberra
Why Profectus
Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs.
We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.
#J-*****-Ljbffr

📌 Lead Caasm Specialist (Runzero) (Canberra)
🏢 Profectus
📍 Canberra