Senior Audit and Security Engineer

RFQ-ASD-LH-05060 Senior Audit and Security Engineer Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government Top Secret Positive Vetting (TSPV) clearance is essential. These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade). ABOUT THIS ROLE ASD requires an experienced APS 6 equivalent Security Engineer for the development and enhancement of ICT security systems. The engineer will be responsible for activities through the entire software lifecycle including: system definition, requirements, design, development, integration, verification and validation. This role will also be required to participate in ongoing security monitoring of systems and services, and support deployment of systems in alignment with the ASD Security Plan. Estimated start date: Wednesday, 01 April 2026 Initial contract duration: 12 months Extension term: 12 months Number of extensions: 2 Location of work: QLD, ACT, VIC, SA Working arrangements: Onsite. Candidates must be willing to undergo ASD's Organisational Suitability Assessment (OSA) prior to engagement. Candidates required to have PV clearance. ABOUT THE COMPANY Australian Signals Directorate (ASD) is the federal agency responsible for foreign signals intelligence, cyber warfare and information security. ASD's purpose is to defend Australia from global threats and help advance our national interests. Situated in Canberra, ASD employs over 2000 TSPV cleared workers. ASD's workforce is growing rapidly. Areas of growth include PMO, cyber security, systems administration and engineering, software development and network engineering. A top-security, complex and highly technical environment, ASD plays a vital role in the defence of Australia. Long contracts (12 months+) available. JOB DUTIES AND RESPONSIBILITIES Develop and operate IT security systems, this may include next generation firewalls, intrusion detection, web application firewalls, content filtering, API security, DDoS protection, proxies, end point detection and response, network detection and response, user behaviour analytics, SIEM, vulnerability scanning, secrets management, identity and access control systems, application whitelisting, device control, Public Key Infrastructure and encryption solutions; Review current system security controls and implement remedial actions; Develop and operate systems to monitor and analyse security logs and event information; Develop and operate systems for security automation; Guide technical staff on implementation of security controls; Analyse and assess ICT system security documentation and configuration, including the use of vulnerability assessment tools. Work collaboratively within a multi-disciplinary environment and facilitate team work and group activities. Interpret business objectives, adapt, and adjust priorities to progress work and meet business objectives. Provide support to the Technical Leadership; and Other tasking/activities as reasonably required/directed by Commonwealth PoC. TECHNICAL SKILLS Essential Proven knowledge of information security principles, practices and technologies. Proven experience in the development and administration of ICT security systems and applications. Experience with Linux systems and programming languages such as Python and PowerShell. Demonstrated experience in administering Windows or Linux operating systems and core ICT network services. Experience in development of use cases, procedures and technical documentation to ensure delivery of security services. Desirable Experience managing security data pipelines Bachelor's degree or qualification in ICT or area relevant to the essential requirements. At least 5 years' experience working in ICT environment, with minimum 3 years working as a Security Engineer. Experience working for Defence and/or Intelligence environments. Government experience should be noted. SKILLS & EXPERIENCE NEEDED The extent to which the candidate demonstrates the ability to perform the Key Duties and Responsibilities as set out in the RFQ. Demonstrated experience in vulnerability management, endpoint detection and response, user behaviour analytics and/or SIEM tools. The extent to which the candidate demonstrates the ability to meet the technical skills in the RFQ. Australian Citizenship and a TSPV security clearance is essential BENEFITS Why work for ASD? Work on interesting and prestigious projects vital to the ongoing defence of Australia. Flexible work environment; work the hours that suit you between 7am and 7pm. Low attrition rate: the great variety of projects and opportunities across different business areas ensure few workers leave ASD. Long contracts available. Fantastic growth opportunities available at any stage of your career. Why Kinexus? Kinexus has been supplying TSPV contractors to government panels since 2004 and have a strong relationship with them. We are one of just 9 suppliers Australia-wide. Our experience in managing contractors in defence/national security industries means we understand the requirements from the Commonwealth, insurances and clearances. DISP accredited; we can hold clearances and manage renewals. Dedicated account manager (me) who is your dedicated POC and offer continuous contractor care. Rate negotiation guidance in line with the SFIA framework. Dedicated payroll assistant who facilitates your taxes and super. We proactively chase timesheet approvers to ensure you get paid on-time and error free. Regular visits to Canberra for coffee, lunches and quarterly drinks events. We can facilitate novated car leases, LAFHA or salary sacrifice. We'll keep you up to date with the most appropriate, interesting opportunities in your field. Community matters. Kinexus supports women in Defence through our female mentoring program and rewards referrers through our Referral Rewards scheme. Support for your health and wellness through counselling support (EAP) available for all contractors and their families. All applications should include your resume as a word document. For more information, visit our website, or contact Cindace Prasad on #LI-CP #SCR-cindace-prasad #J-18808-Ljbffr