Job Description
Remote is seeking Cyber Analysts to join the team in ASD. The Cyber Analysts will provide ICT security advice and assistance to government, including policy creation, project advice and assistance, and research. The Cyber Analysts need to understand cyber intrusion activities then use their research skills to provide reporting on threat modelling and intelligence. They will be organised, dynamic, outcome-orientated individuals with strong communication skills.
Role Description
Job Duties and Responsibilities may include:
- Deliver complex briefs and cyber intelligence reporting related to the Australian Signals Directorate and national security issues.
- Undertake complex research and analysis of relevant cyber threat actors to provide situational awareness on the current and emerging threat to the Australian Signals Directorate.
- Analyse identified cyber threat event data and fuse with all-source intelligence in order to identify, model, and track threat actors targeting the Australian Signals Directorate, and recommend any required actions.
- Understand and use analytical tools and techniques to develop cyber threat activity-related assessments.
- Coordinate with senior leadership.
Technical skills required:
- (Preferred) Holds a Bachelor of Computer Science, Computer Systems Engineering or an Intelligence related discipline or equivalent qualification/work experience in either of these fields:
** Penetration Testing,
** Host and/or network Forensics, or
** Intelligence Analysis.
- At least 5 years’ experience as a Cyber Analyst / Engineer or similar role.
- Broad understanding and experience in the application of the Essential 8.
- Extensive experience with network security technologies from vendors such as Palo Alto, Cisco, Sourcefire, FireEye, Blue Coat, Gigamon and Ixia.
- Vast experience installing and configuring COTS network security devices such as Next Generation Firewalls (NGFW), Intrusion Detection Systems (IDS), NetFlow and Network Visibility appliances.
Essential criteria:
- F1:5 - Intrusion Detection and Analysis: Level 5 (CIISEC) Analysts: Manages intrusion and analysis teams. Responsible for taking decisions on appropriate response, escalating as necessary. Liaises with relevant threat intelligence units. Appropriate and relevant certifications include CREST Certified Network Intrusion Analyst, CREST Certified Host Intrusion Analyst, CREST Certified Malware Reverse Engineer.
- B1:5 - Threat Intelligence, Assessment and Threat Modelling: Level 5 (CIISEC) Analysts: Undertakes complex threat intelligence/modelling tasks or threat assessments without supervision. Manages threat intelligence/assessment teams. Appropriate and relevant certifications include CREST Certified Threat Intelligence Manager.
- I1:5 - Research: Level 5 (CIISEC) Analysts: Has led teams responsible for delivering against Information Security research strategies and/or programmes. Supervises and/or mentors research work of less experienced researchers.
Desirable criteria:
- Strong written and verbal communication skills
- Desire to be accountable for their actions
- Strong stakeholder management skills
- Demonstrate leadership behaviours
- Willing to challenge the traditional ways of doing business
- Thrive in dynamic environments and comfortable with ambiguity
- Outcome-focused mindset
- Adaptability, resilience, flexibility and teamwork, including regionally dispersed teams