Cyber Defence Officer - (Canberra/Sydney based - Hybrid working)
Commonwealth Superannuation Corporation – Canberra ACT
14h ago , from Commonwealth Superannuation Corporation
Information & Communication Technology,Security & Protective Services
About the Role:
The Cyber Defence Officer supports CSC Cyber Defence team in protecting CSC financial and information assets.
This role focuses on assisting with security monitoring, incident response, vulnerability assessments, and compliance activities.
Working within a small team of specialist, the officer uses modern security tools, processes, and frameworks to contribute to the ongoing improvement of CSC's security posture.
The role requires a solid understanding of Information Security fundamentals, a strong willingness to learn, and the drive to develop technical expertise while directly helping to reduce cyber risks.
What You Will Do:
Security Operations Support
Monitor and review security alerts, escalating issues to senior analysts or supervisors as required
Assist in developing and testing detection use cases and response playbooks
Help refine alerting systems to reduce false positives and improve accuracy
Support basic threat intelligence monitoring and prepare summary report
Security Incident Response & Investigation
Assist with triage and investigation of security incidents under supervision
Support deeper analysis and root cause investigations led by senior staff
Contribute to incident documentation, reporting, and lessons learned activities
Participate in information sharing with government and industry partners
Security Platforms Support
Support day-to-day operation of security platforms (e.g., SIEM, EDR, threat intel tools)
Assist with optimisation and configuration updates under guidance
Help maintain documentation, including procedures, configurations, and playbooks
Contribute ideas for automation and continuous improvement initiatives
Security Compliance & Access Audit Support
Support regular privileged access reviews and the enforcement of least privilege
Assist in preparing compliance reports and responding to audit requests
Maintain records to demonstrate alignment with internal policies and external requirements
Contribute to process improvements to strengthen compliance activities
Security Awareness & Culture Support
Provide timely advice to business and IT stakeholders on security best practices
Develop and deliver awareness content, articles, and internal briefings
Actively promote a strong security culture across CSC




Specific duties, deliverables and reporting lines may vary from time-to-time dependant on business needs and priorities.
Key objectives and measurements will be captured in the Performance & Development planning cycle, established annually and adapted as needed.
What You Will Do:
Security Operations Support
Monitor and review security alerts, escalating issues to senior analysts or supervisors as required
Assist in developing and testing detection use cases and response playbooks
Help refine alerting systems to reduce false positives and improve accuracy
Support basic threat intelligence monitoring and prepare summary report
Security Incident Response & Investigation
Assist with triage and investigation of security incidents under supervision
Support deeper analysis and root cause investigations led by senior staff
Contribute to incident documentation, reporting, and lessons learned activities
Participate in information sharing with government and industry partners
Security Platforms Support
Support day-to-day operation of security platforms (e.g., SIEM, EDR, threat intel tools)
Assist with optimisation and configuration updates under guidance
Help maintain documentation, including procedures, configurations, and playbooks
Contribute ideas for automation and continuous improvement initiatives
Security Compliance & Access Audit Support
Support regular privileged access reviews and the enforcement of least privilege
Assist in preparing compliance reports and responding to audit requests
Maintain records to demonstrate alignment with internal policies and external requirements
Contribute to process improvements to strengthen compliance activities
Security Awareness & Culture Support
Provide timely advice to business and IT stakeholders on security best practices
Develop and deliver awareness content, articles, and internal briefings
Actively promote a strong security culture across CSC
Specific duties, deliverables and reporting lines may vary from time-to-time dependant on business needs and priorities.
Key objectives and measurements will be captured in the Performance & Development planning cycle,



established annually and adapted as needed.
What you'll bringYou'll bring a strong foundation in cyber security, combined with practical experience investigating security issues and working with enterprise security technologies.
You'll be comfortable working across technical and business teams, translating complex security matters into clear, practical advice.
Ideally, you'll have:
Tertiary qualifications in Cyber Security, Computer Science or a related discipline.
At least 2 years' experience in Information and Communications Technology (ICT), with hands‐on exposure to cyber security.
Experience investigating security incidents, identifying issues and recommending practical solutions.
Knowledge of Microsoft Active Directory security configuration.
Experience working with vulnerability management and malware protection technologies.
Exposure to enterprise security technologies such as SIEM, Identity and Access Management (IAM), Endpoint Protection, DDoS Protection and Data Loss Prevention (DLP).
Knowledge of security practices across cloud environments, particularly AWS and Azure.
An understanding of recognised cyber security frameworks and standards such as NIST, PSPF, OWASP, PCI DSS, ISO ***********, ASD Essential Eight and NIST CSF.
Knowledge of security configuration across infrastructure including switches, routers, proxies, load balancers, firewalls, Windows and Linux environments, and email security technologies.
Strong analytical and problem‐solving skills, with the ability to assess information, identify risks and recommend practical solutions.
Well‐developed written, verbal and presentation skills, with the ability to communicate security issues clearly to different audiences.
A collaborative approach and the ability to build strong working relationships across technical and non‐technical teams.
Highly regarded:
Industry security certifications such as CISSP, CISM, CEH or GSEC.
Experience working with security and compliance requirements within financial services, government or other regulated environments, including APRA and the Australian Government Information Security Manual (ISM).
Broader experience implementing or operating enterprise cyber security technologies.
Why join CSC?
Remote/Hybrid work options
Join CSC's Tech transformation journey and gain exposure to complex technology initiatives across a leading superannuation environment.
Learn more about CSC and our perks on our career siteCareers
#J-*****-Ljbffr

📌 Cyber Defence Officer - (Canberra/Sydney Based - Hybrid Working)
🏢 Commonwealth Superannuation
📍 Canberra