Senior Security Engineer

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO). The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.

Key Responsibilities

• Manage and develop ICT system security activities across complex systems
• Lead the application and compliance of security controls and security operations procedures
• Develop and maintain accreditation documentation, including Concepts of Operations (CONOPs) and System Security Plans (SSPs)
• Achieve and maintain ATO for ICT systems
• Conduct security risk assessments, threat assessments and compliance reviews
• Work with ICT engineers, architects and security teams to agree controls and secure approvals
• Prepare executive briefs and security recommendations for senior management
• Communicate technical security matters clearly to technical and non-technical audiences
• Contribute to secure system design and operation

Required Experience

• Demonstrated experience leading the application and compliance of security controls within complex ICT environments
• Proven experience developing ATO or security accreditation documentation, including System Security Plans
• Experience conducting security risk assessments, threat assessments and compliance reviews
• Demonstrated ability to negotiate with engineers, architects and security stakeholders to achieve accreditation outcomes
• Strong written skills, including technical documentation and executive briefs
• Strong communication and problem-solving skills, with the ability to work effectively in multidisciplinary teams

Desirable Experience

• Formal security certifications such as CISSP, CISM, CCSP or SABSA
• IRAP Assessor training or equivalent security accreditation experience
• Experience in Defence, national security or other highly regulated ICT environments
• Experience supporting secure infrastructure, cloud environments and system integration projects

Security Clearance Requirements

• Must be an Australian Citizen
• Must have a current AGSVA Positive Vetting (PV) Security Clearance

Working Arrangements

• Onsite
• Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.