Senior Security Engineer

Profectus is seeking multiple experienced Senior ICT Security Engineers to support security engineering and accreditation activities within an Australian Government agency. You will integrate security requirements across the system lifecycle so ICT systems achieve and maintain Authority to Operate (ATO). The work covers security control implementation, accreditation documentation, risk and threat assessments, and engagement with engineering and security teams.

Key Responsibilities

Manage and develop ICT system security activities across complex systems

Lead the application and compliance of security controls and security operations procedures

Develop and maintain accreditation documentation, including Concepts of Operations (CONOPs) and System Security Plans (SSPs)

Achieve and maintain ATO for ICT systems

Conduct security risk assessments, threat assessments and compliance reviews

Work with ICT engineers, architects and security teams to agree controls and secure approvals

Prepare executive briefs and security recommendations for senior management

Communicate technical security matters clearly to technical and non-technical audiences

Contribute to secure system design and operation

Required Experience

Demonstrated experience leading the application and compliance of security controls within complex ICT environments

Proven experience developing ATO or security accreditation documentation, including System Security Plans

Experience conducting security risk assessments, threat assessments and compliance reviews

#J-18808-Ljbffr