Principal Cyber Security Engineer

About the Company

Our client is a dedicated technology organization focused on delivering secure, scalable data solutions for highly regulated and critical sectors including government, defense-related programs, healthcare, and commercial industries. They emphasize building high-performing teams that foster ownership, curiosity, trust, and technical excellence, offering employees the chance to contribute to impactful systems.

Role Overview

We are looking for an experienced Principal Cyber Security Engineer to join a skilled team in Canberra. This permanent role involves leading the design, implementation, and oversight of cybersecurity architectures across multiple platforms within secured and defense-oriented environments. You'll ensure system integrity, resilience, and compliance with Authority to Operate (ATO) standards by leveraging technical controls, risk management, and adherence to the Australian Information Security Manual (ISM). This position requires an active NV2 security clearance and offers a salary of approximately $190,000 plus superannuation, with some flexibility available for exceptional candidates.

Key Responsibilities

• Establish and enforce cybersecurity standards incorporating frameworks such as NIST, ISO/IEC 27001, and the Essential Eight.
• Assist in compiling cybersecurity documentation, risk registers, and evidence packages needed for ATO certification.
• Apply and verify technical security safeguards in classified contexts complying with the Australian ISM.
• Design and oversee secure automation workflows using tools like Ansible, Terraform, and Packer.
• Create and deploy security tools to mitigate vulnerabilities, enhance automation, and bolster defenses.
• Perform risk assessments, penetration tests, vulnerability analyses, and security audits.
• Analyze security logs and events to detect and respond to emerging threats promptly.
• Collaborate with engineering teams on secure solutions regarding authentication, encryption, and access controls.
• Research and integrate emerging cybersecurity technologies to strengthen infrastructure protection.
• Effectively communicate security plans and strategies to both technical and non-technical stakeholders.
• Troubleshoot complex cybersecurity issues with expert precision.
• Support the deployment, setup, maintenance, and continuous optimization of SIEM systems, notably Splunk.

Candidate Profile

• Over six years of cybersecurity experience, preferably within defense, government, or critical infrastructure sectors.
• Relevant tertiary qualifications or industry-equivalent expertise.
• Current CISSP or equivalent certification alongside recognized government cybersecurity credentials.
• Strong proficiency in managing Linux and Windows systems, network security, and cloud platforms such as AWS, Azure, and GCP.
• Hands-on experience with Ansible including the development and maintenance of playbooks, roles, and automation tasks.
• Practical knowledge of Splunk or similar SIEM solutions, involving installation and ongoing administration.
• Thorough understanding of SIEM deployment, logging, monitoring, and incident detection mechanisms.
• Experience with infrastructure automation tools like Terraform, Packer, Chef, or Puppet.
• Programming skills in Java; Python or Ruby scripting abilities are highly desirable.
• A track record of leading cybersecurity projects, influencing architectural decisions, and engaging stakeholders effectively.
• Australian Citizenship with a current Australian Government Security Clearance level NV2 (mandatory).

Compensation and Benefits

• Permanent full-time employment based in Canberra.
• Competitive salary around $190,000 plus superannuatiom; negotiable for top-tier candidates.
• Work on nationally important and mission-critical programs.
• Engage in a collaborative and technically advanced work environment.
• Exposure to state-of-the-art defense-grade and secure technologies.
• Opportunity to contribute meaningfully to cyber strategy and architecture decisions.

Additional Information

Applicants will be required to complete pre-employment checks including verification of identity, work rights, security clearance, and any other client-specific assessments.