Cyber Security Specialist
Melbourne Support Centre
Australia Post
Australia Post provides reliable and affordable postal, retail, financial and travel services.General information
Press space or enter keys to toggle section visibility
Name Cyber Security Specialist Site / Location Melbourne Support Centre Ref # 12366242 Entity Australia Post Opening Date 17-Dec-2024 Suburb Richmond Work Type Permanent Full TimeDescription & Requirements
Press space or enter keys to toggle section visibility
Help us deliver like never before
We’re looking for a Cyber Security Specialist to join our diverse, talented and innovative digital technology team who together are helping our customers and communities build a better future. Together, we design, build and maintain products, services and experiences that Australian's love and trust, while delivering a sustainable future for Australia Post, and you could be part of that.
We're empowered to deliver for our teams and to delight our customers. We provide an inclusive and supportive environment that nurtures talented people, trusts our teams to deliver their best, and leverages modern work practices and technologies. It's an unexpectedly dynamic and collaborative culture that feels more like a start-up than a 213-year old icon.
What you’ll deliver with us
This team provides insight of the cyber-threat landscape and expertise of protective measures to Australia Post. This role sits within the Cyber Defence function and is focused on subject matter expertise of our technical security controls, and ensuring our controls are configured to protect against cyber-threats in an effective and timely manner across the organisation. Reporting directly the Manager of Cyber Security Controls you will be continuously monitoring the cyber threat landscape for the latest or emerging trends. This insight is then captured and appended into technical configuration frameworks and is used in coordination with the various support teams to drive uplift and/or remediation.
As part of your role, you will Produce security metrics to measure level of efficacy and maturity of the security controls baseline across Australia Post. Additionally, you will participate in strategic security planning to identify new threats and will be the delegate manager of threat detection when required. Escalation and resolution of priority security incidents.
You’ll also
- Monitor cyber threat landscape and be appraised of the latest and emerging trends and events.
- Develop and continuously update cyber security baseline documentation with the latest threat protection configuration and guidelines.
- Hunt for and identify gaps in our security controls based on tactics, techniques, and procedures (TTPs)
- Cooperate with various teams to tune cyber security tooling and controls to reduce threat vectors.
- Identify and report on threat vectors, vulnerabilities, and information security risks across Australia Post
- Provide subject matter expertise in scenarios regarding policies, compliance obligations and best practises.
- Develop and enable cyber threat use cases for the detection of threats, anomalies and security risks across the organisation
- Assist in the architecture, design, evaluation and implementation of new technologies across the organisation based on latest knowledge of the threat landscape.
About you
We are looking for a strong communicator with good stakeholder management skills. Internally you will partner with various business Units to adapt to business requirement and strategies. Key ISO teams you will work with are the Security Engineering, Vulnerability, Threat, Monitoring & Response and Identity teams. The Digital Delivery teams (in a Dev Ops model) and the Australia Post IT development, project and support teams will be key stakeholders as well. Externally you will collaborate with cyber security vendors and contracted service providers for Australia Post, industry peers and government agencies. Exposure to process for both datacentre and cloud environments (IaaS, SaaS, PaaS) is useful in this role.
You’ll also need
- 5+ years of working experience in information security operations/analyst/SOC engineering role in complex IT environment.
- Understanding of policy implementation, method of change and implementation of core controls in a professional service environment.
- Expertise in cyber threat landscape, detection strategies, attack chain/lifecycle of malicious attacks, frameworks and attack models.
- Basic understanding of cloud control fundamentals, container security and DDOS protection.
- Background working with Endpoint Detect Response (EDR) technologies in complex environments to detect and respond to configuration gaps.
- Understanding of IT security technologies such as malware protection, firewall, application control, SIEM, web and email gateways, etc
- Knowledge of Windows, Linux, virtualisation and mobile operating system
- Operational knowledge of EDR technologies, operating systems (Windows, Linux, UNIX), core technology services, common attack tools, and vulnerability detection/management tools.
- Exposure to scripting/development and interacting with APIs is useful.
How we’ll deliver for you
- Join one of the most culturally and linguistically diverse workforces in Australia, where we’re all ages, genders and come from all walks of life.
- Immerse yourself in the AP Way – where every single team member partakes in a learning module to help understand the vital role we play in delivering on our strategy and purpose
- We offer great development opportunities in a growing Enterprise Service function.
How we’ll deliver for you
- Join one of the most culturally and linguistically diverse workforces in Australia, where we’re all ages, genders and come from all walks of life.
- Immerse yourself in the AP Way – where every single team member partakes in a learning module to help understand the vital role we play in delivering on our strategy and purpose
- We offer great development opportunities in a growing Enterprise Service function.
We’re delivering together
At Australia Post, we acknowledge the Traditional Custodians of the land on which we operate, live and gather as employees.
We believe our business should reflect the diverse communities we operate in and are proud to be an inclusive workplace for people from all walks of life. We encourage applications from people of all ages, genders and backgrounds including Aboriginal and Torres Strait Islander peoples, People with Disability, LGBTQIA+ and Refugees. We are one of the largest organisations in Australia to successfully achieve Disability Confident Recruiter status. We are committed to providing an inclusive and barrier-free recruitment process and workplace for those living with a disability and are committed to reviewing and removing bias in our processes to create a gender-equitable recruitment experience and workplace. If you have any questions about accessibility, please contact our Diversity & Inclusion team on inclusivecareers@auspost.com.au
“At Australia Post, we understand the importance of balancing work and personal life. Speak to us about what flexible work means to you"
See and hear what it's like to be part of our teams in digital tech:
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: APIs Cloud Compliance DDoS DevOps EDR Firewalls IaaS Linux Malware Monitoring PaaS SaaS Scripting SIEM SOC Strategy Threat detection TTPs UNIX Vulnerabilities Windows
Perks/benefits: Career development Flex hours Startup environment Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.