Job Title - Cyber Security Engineer/Technical Professional

Job Id 1268174

- Security Clearance: NV1 Clearance
- Length of Contract: 4 months
- The role closes on 17/11/2026
- Location: Melbourne, VIC

About the Role:

We are seeking a Cyber Security Engineer or Technical Professional to execute security accreditation, assurance, and compliance activities in support of CA33 - Command Support Systems.

The primary focus of this role is to maintain and support the security of CA33 capabilities throughout their lifecycle, ensuring compliance and cyber security requirements.

Working within the CA33 Cyber and Security team, the successful candidate will collaborate with engineering, software development, and sustainment personnel to assess security risks, develop and maintain accreditation documentation, and support Authority to Operate (ATO) activities.

Key Responsibilities:

Security Accreditation and Assurance

- Execute and coordinate security accreditation activities for CA33 Command Support Systems.
- Develop, maintain, and update security accreditation artefacts and supporting documentation.
- Conduct security risk assessments and document identified risks, treatments, and residual risk outcomes.
- Prepare security assurance evidence and documentation to support accreditation and ATO outcomes.
- Liaise with DCIAB and relevant stakeholders to support accreditation and assurance activities.
- Apply and support compliance with the ISM, security policies, DISP requirements, ISO 27001, and NIST guidance.
- Work with stakeholders to support accreditation outcomes and security compliance activities.
- Review security-related changes and provide advice regarding impacts to accreditation status and security posture.
- Provide cyber security advice, recommendations, and guidance to engineering and technical personnel as required.
- Contribute to vulnerability remediation, security control implementation, and system hardening activities.

Key Relationships:

- CA33 Engineering and Sustainment personnel




- Software Development teams supporting CA33 capabilities.
- Cyber and Information Assurance Branch (DCIAB).
- Army (LC4ISREW) and Joint Security stakeholders.
- JSD LC4SB Cyber and Security representatives Essential Experience:
- Experience undertaking security accreditation, cyber security assurance, or system authorisation activities
- Experience conducting cyber security risk assessments and supporting ATO processes.
- Working knowledge of the ISM and cyber security requirements.
- Experience producing security accreditation documentation, risk assessments, and assurance reports.
- Robust written and verbal communication skills.
- Understanding of systems engineering principles and the SDLC.

Desirable Experience:

- Experience applying the CSAAF.
- Familiarity with ICT environments, command support systems, or mission systems.
- Knowledge of vulnerability management, system hardening, and security control implementation.
- Experience with ISO 27001, NIST, DISP, and security governance frameworks.

SFIA Skills Sought:

The selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

SCTY Level 3:

Communicates information security risks and issues to business managers and others. Performs basic risk assessments for small information systems. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organisational policy and local risk assessments. Investigates suspected attacks. Responds to security breaches in line with security policy and records the incidents and action taken.

Please contact [email protected] or simply click apply to submit your application

"We warmly welcome applications from individuals of all backgrounds, including First Nations Australians, Australian Defence Force and First Responder veterans, women in STEM, and people of all abilities, including those registered with the NDIS."

📌 Cyber Security Engineer/Technical Professional (Melbourne)
🏢 ArisZincGroup
📍 Melbourne