Cyber‑Security Engineer - Defence Systems

We continually strive to help our workforce achieve their professional and personal goals, engaging them in challenging and inspiring projects.

As the Senior Cyber Security Engineer, you will lead the delivery of system-level cyber security across complex Defence programs. Operating across multiple projects, you will define and drive cyber-security requirements, develop secure architectures, oversee assurance activities, and manage security risks to ensure EOS material systems remain secure, compliant and resilient.
You will provide specialist guidance to project teams, produce cybersecurity compliance artefacts, and support formal accreditation processes.

This includes developing policy, control, risk and procedural documentation required to demonstrate conformance with Defence security standards and achieve system accreditation.

Key Responsibilities

• Elicit, develop and manage cybersecurity requirements, baselines and controls.

• Collaborate with stakeholders on the analysis of customer cybersecurity requirements.

• Support development and test teams in implementing and validating cybersecurity requirements.

• Development and management of key security documentation and in the assessment and authorisation activities

• Act as the technical point of contact for system‑level cybersecurity discussions.

• Perform technical risk assessments and support incident response activities.

• Support the conduct of security working groups to discuss risks and controls with stakeholders

• Support the conduct of threat risk and vulnerability assessments

• Perform threat modelling for new and existing systems, as well as putting in place necessary controls and mitigations.

• Coach and mentor other members of the team on cybersecurity designs and compliances.

Required Skills & Experience

• Demonstrated expertise in Systems Engineering methodologies, processes, and toolsets.

• Sound knowledge of software engineering principles and practices.

• Extensive experience working with embedded systems in highly regulated sectors such as Defence, Automotive, Medical, or Aerospace.

• Proficient in secure software development, including DevSecOps pipelines and code analysis technologies.

• Strong understanding of the ACSC Information Security Manual (ISM), Defence Security Principles Framework (DSPF), and Protective Security Policy Framework (PSPF), with the ability to apply these frameworks to practical security control design and assessment.

• Skilled in the development and maintenance of Standard Operating Procedures.

• Proven ability to prioritise and manage multiple competing demands in dynamic environments.

• A proactive and detail‑oriented approach, supported by a commitment to continuous improvement.

Qualifications

• A University degree in Cyber Security, Technology or relevant Engineering discipline.

• Certifications in Cyber Security or relevant field.

• Eligibility for Australian Defence security clearance (Baseline, NV1, or higher).

• Australian citizenship is required.

Professional Attributes

• Strong analytical and problem‑solving skills.

• Excellent communication skills and the ability to translate complex security concepts for non‑technical stakeholders.

• Commitment to continuous learning and staying current with emerging threats and technologies.