Lead Cyber Incident Responder - NV1

Role Title

Lead Cyber Incident Responder

Location

ACT

Working Arrangement

Hybrid
Working from home arrangements may be considered for up to 2 days per week. The role may require on-call work outside standard hours, as well as out-of-hours and weekend work, including public holidays.

Maximum 40 hours per week.

Clearance required

Must be able to obtain Negative Vetting Level 1

Company overview

Department of Agriculture, Fisheries and Forestry

Job Description

The Cyber Security Incident Response Team is seeking a Lead Cyber Incident Responder to lead and respond to cyber security incidents while supporting the continual improvement of the Department's security posture. The role requires strong technical expertise in cyber security incident response and excellent communication skills to collaborate effectively with diverse internal and external stakeholders.

Duties and Responsibilities

• Lead and respond to potential and actual cyber security incidents end to end across the cybersecurity incident response lifecycle.
• Use provided tools and technologies to support and drive cybersecurity incident response activities.
• Lead and manage cybersecurity incident communications, ensuring all parties are informed of incidents and their roles in the response process.
• Develop and maintain records and documentation related to cybersecurity incidents.
• Communicate and document technical findings and recommendations to technical and non-technical stakeholders through reports, briefs, emails and verbal advice.
• Facilitate recovery activities, including post-incident reviews.
• Develop, maintain and test cybersecurity incident management policies, plans and procedures, ensuring compliance with regulatory requirements and best practice.
• Identify and drive technical improvements, including alert tuning.
• Maintain and optimise cybersecurity incident response processes.
• Mentor and upskill other team members.
• Undertake other duties as directed.

Knowledge/Skills required

• Demonstrated cyber security incident response technical expertise, including leading and responding to incidents end to end.
• Demonstrated strong technical expertise using Microsoft security tools to drive cyber security incident response.
• Demonstrated effective verbal and written communication during and after a cyber security incident, including the ability to convey technical findings and recommendations to both technical and non?technical stakeholders.

Diversity and Inclusion

We value diversity and are committed to creating an inclusive environment for all employees.

Veterans

Defence and Federal Government industry experience is highly desirable. We strongly encourage veterans and individuals with Defence experience to apply. Your unique skills and background are highly valued, and we are committed to supporting your transition into this role.

About Cleared

At Cleared, we provide tailored recruitment solutions to individuals seeking their next opportunity and to organisations searching for talent within Defence Industry, Intelligence and National Security.