Key responsibilities

• Design, implement, and manage cyber security infrastructure, toolsets & rulesets including areas of Cloud security (Azure and AWS), Microsoft Defender & InTune , firewalls, SIEM, Application Control, PAM, email security, etc.
• Support, maintain and provide advice on uplift and enhancement activities, including ACSC’s Essential Eight.
• Review existing security configurations and provide recommendations on improvements.
• Produce security documentation, plans, and procedures on tooling and processes.
• Assess the relevance of new and emerging Cyber Security Suppliers and Technologies.
• Contribute to the Security team meeting its overall responsibilities including where required.
• Assist with cyber security incident response by completing Investigations and remediations.
• Assist with Security Threat & Risk Assessments and relevant tasks.

Specific duties, deliverables and reporting lines may vary from time to time dependant on business needs and priorities. Key objectives and measurements will be captured in the Performance & Development planning cycle, established annually and adapted as needed.

What we’re looking for

• Tertiary qualifications in Cyber Security, Computer Science or a related discipline
• Relevant industry security certifications (CEH, CISM, CISSP, GSEC etc.).
• Hands on experience implementing, configuring, and managing Microsoft Defender (for endpoint, email, Cloud, identities and Cloud apps) and Intune
• Hands on experience implementing, configuring, and managing SIEM, preferably Splunk or Sentinal, as well as firewalls and web proxy
• Security compliance in financial and government environments e.g. APRA 231/234 and ISM.
• Demonstrated knowledge of multiple security frameworks (e.g. NIST, PSPF) and of security best practices for cloud services (IaaS, PaaS & SaaS) particularly AWS and Azure security configuration.
• Demonstrated knowledge of industry good practices such as OWASP, PCI DSS, ISO27001/2, ASD E8, NIST CSF.
• Experience in the enterprise design of contemporary technologies such as Identity and Access Management, End Point Protection, DDoS Protection, Data Loss Prevention.
• Complex threat and risk assessments and security incident investig.
• Demonstrated ability to provide expert security advice, develop quality cyber security controls, processes and policies.
• Demonstrated ability to build and maintain collaborative relationships.
• Highly developed written and oral communication and presentation skills
• Highly developed liaison and negotiation skills.

Why join CSC? 

• Permanent role with flexible and hybrid work options
• Enhanced parental leaves
• An opportunity to create an impact in a newly created role

What you’ll get in return

A career where you belong

At CSC, we’re committed to more than super — we’re committed to people. That means creating a workplace that values diversity, promotes equity, and fosters inclusion across everything we do.

Our gender equality strategy is more than a promise — it’s a plan. We're actively increasing representation in our workforce, removing barriers to career progression, and creating pathways for all employees to grow and succeed.

We welcome candidates of all genders, cultural backgrounds, ages, sexualities, and abilities. We offer flexible work, inclusive policies, and development opportunities designed to support you at every stage of your career.

We’re proud to be an equal opportunity employer — and proud of the progress we’re making. Join a workplace where you can thrive, grow, and belong.
 

Learn more about CSC and our benefits on our career site -  Careers

How to apply

To apply for this opportunity, please submit your application via the Apply link in this advertisement, including a short cover letter along with your current resume.

To ensure all applications are considered in the review process, we request you to please apply through the advertised links only.

Applications close:  11th Sep 2026 

For any other questions about this role, contact recruitment@csc.gov.au.