RFQ-ASD-LH-04002 Security Operations Analyst

Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government Top Secret Positive Vetting (TSPV) clearance is essential.

These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade).

ABOUT THIS ROLE

ASD are seeking a highly skilled and experienced Security Operations Analyst Contractor to develop the monitoring capability for specialised ASD systems. This individual will also be responsible for leading the monitoring of this system as well as the response to any incidents identified relating to the system.

Estimated start date: Monday, 29 September 2025

Initial contract duration: 18 Months

Extension term: 12 Months

Number of extensions: 2

Location of work: ACT

Working arrangements: Onsite WFH as per ASD WFH policy can be accommodated on a limited basis. Interstate based candidates cannot be accommodated. An Organisational Suitability Assessment (OSA) must be completed prior to commencement. Applicants must hold a current TSPV clearance prior to commencement.

ABOUT THE COMPANY

Australian Signals Directorate (ASD) is the federal agency responsible for foreign signals intelligence, cyber warfare and information security. ASD's purpose is to defend Australia from global threats and help advance our national interests.

Situated in Canberra, ASD employs over 2000 TSPV cleared workers. ASD's workforce is growing rapidly. Areas of growth include PMO, cyber security, systems administration and engineering, software development and network engineering.

A top-security, complex and highly technical environment, ASD plays a vital role in the defence of Australia. Long contracts (12 months+) available.

JOB DUTIES AND RESPONSIBILITIES

• Investigate information security incidents ensuring that incident response processes are being followed.
• Analyse, document and resolve identified security incidents in accordance with established procedures and recommend any required actions.
• Contribute to digital forensic investigations by processing and analysing evidence and artefacts in line with policy, standards and guidelines and support production of forensics findings and reports.
• Utilise a diverse set of capabilities, including various SIEM and Host Based investigation capabilities, to investigate cyber security incidents as well as develop skills in new capabilities as required as part of investigations.
• Provide assistance with the development of technical remediation plans and deliver findings.
• Communicate technical findings and recommendations through formal reporting, briefs, emails and verbal advise as required.
• Develop, maintain and tune analyst playbooks and security use-cases.

TECHNICAL SKILLS

• At least 2 years' experience as a security specialist working across security architecture, security and risk management, communication and network security or security operations domains.
• Experience ensuring technical systems adhere to Essential Eight, ISM, and PSPF frameworks.
• Proven ability to communicate complex technical systems to non-technical audiences.
• Excellent organisational and communication skills
• Proven record building, managing, and enhancing relationships with stakeholders.

SKILLS & EXPERIENCE NEEDED

Essential Criteria

• Oversees security operations procedures, ensuring adherence and effectiveness, including cloud security practices and automated threat responses.
• Reviews actual or potential security breaches and vulnerabilities and ensures they are promptly and thoroughly investigated. Recommends actions and appropriate control improvements.
• Ensures the integrity and completeness of security records, ensuring timely support and adherence to established procedures.
• Contributes to the creation and maintenance of security policies, standards and procedures integrating new compliance requirements and technology advances.
  Monitors and manages incident queues to ensure incidents are handled according to procedures and service levels.
• Contributes to developing, testing and improving incident management procedures. Uses analytics tools to track trends.
• Ensures resolved incidents are properly documented and closed.
• Supports team members in the correct use of the incident process.
• Designs, codes, verifies, tests, documents, amends and refactors moderately complex programs/scripts.
• Applies agreed standards, tools and security measures to achieve a well-engineered result.
• Monitors and reports on progress. Identifies issues related to software development activities. Proposes practical solutions to resolve issues.
• Collaborates in reviews of work with others as appropriate.
• Executes operational procedures, runs automation scripts and performs routine maintenance, installation and monitoring of infrastructure components.
• Adjusts automation tasks as instructed to meet operational standards.
• Reports on infrastructure performance and security events, addressing issues directly when possible or escalating them to others for resolution.
• Australian Citizenship and a TSPV security clearance is essential

Desirable criteria

• Provides guidance on the application and operation of elementary physical, procedural and technical security controls.
• Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems.
• Identifies risks that arise from potential technical solution architectures. Designs alternate solutions or countermeasures and ensures they manage identified risks.
• Investigates suspected attacks and supports security incident management.
• Assists in the operational configuration of network components and the investigation and resolution of network problems.
• Assists in the implementation of basic scripting and automation tools to streamline network support tasks.
• Assists with specified maintenance procedures and follows established safety, security and quality standards.
• Provides first-line support and guidance to network users, escalating issues as necessary.

BENEFITS

Why work for ASD?

• Work on interesting and prestigious projects vital to the ongoing defence of Australia.
• Flexible work environment; work the hours that suit you between 7am and 7pm.
• Low attrition rate: the great variety of projects and opportunities across different business areas ensure few workers leave ASD.
• Long contracts available.
• Fantastic growth opportunities available at any stage of your career.

Why Kinexus?

• Kinexus has been supplying TSPV contractors to government panels since 2004 and have a strong relationship with them. We are one of just 9 suppliers Australia-wide.
• Our experience in managing contractors in defence/national security industries means we understand the requirements from the Commonwealth, insurances and clearances.
• DISP accredited; we can hold clearances and manage renewals.
• Dedicated account manager (me!) who is your dedicated POC and offer continuous contractor care.
• Rate negotiation guidance in line with the SFIA framework.
• Dedicated payroll assistant who facilitates your taxes and super.
• We proactively chase timesheet approvers to ensure you get paid on-time and error free.
• Regular visits to Canberra for coffee, lunches and quarterly drinks events.
• We can facilitate novated car leases, LAFHA or salary sacrifice.
• We'll keep you up to date with the most appropriate, interesting opportunities in your field.
• Community matters. Kinexus supports women in Defence through our female mentoring program and rewards referrers through our Referral Rewards scheme.
• Support for your health and wellness through counselling support (EAP) available for all contractors and their families.

Kinexus is the leading recruitment partner to the defence industry in Australia. We support our community in making intelligent connections and create opportunities to help grow careers.

All applications should include your resume as a word document. For more information, visit our website, www.kinexus.com.au or contact Cindace Prasad at 0449 511 324. #LI-CP