IT Cyber Security Officer (ITSO)

Job Description
At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.
Location:
Brisbane
Category:
Engineering / Technical
Position Type:
Permanent
Job Reference:
BOE/1945401
Attachments:
No File Attached
Share This:
The Opportunity
Do you aspire to help build something better? Would you like to work for a company that employs the best talent to develop and deliver world class capabilities and systems to protect Australia and its national interests? Would you like to work on cutting edge projects? Then we would like to talk to you.
As an equal opportunity employer that promotes a diverse and safe workplace environment, one of the country's leading and preferred defence partners, Boeing Defence Australia (BDA) is seeking Information Technology Security Officers (ITSOs) based in Brisbane to support the MQ-28 Program.
Our ITSOs are an integral part of the Cyber Security team within MQ-28. On the Program, they act as information security advisors in locality, working closely with our engineering teams, System Administration staff and the Commonwealth of Australia on cutting edge next generation systems. In addition to performing an advisory role, ITSOs also have an operational focus that includes ensuring the continuous monitoring and information security assurance of our systems while keeping key stakeholders informed of the security posture of the system.
ITSOs are directly responsible for maintaining the confidentiality, integrity and availability of Program systems. Other responsibilities will include designing, implementing and maintaining the security enforcing functions and capabilities of ICT environments for MQ-28. This role and some of its expectations of routine work will be conducted in accordance with the Commonwealth Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and Defence Security Principles Framework (DSPF).
This role will report into the MQ-28 Cyber Manager, under guidance from the BDA Chief Information Security Officer (CISO) and MQ-28 System Owner.
This role is based in Brisbane but will require regular travel to Woomera, SA to support the MQ-28 Program.
Responsibilities

• Act as a security champion and advisor in all localities the systems operate within, interfacing with all levels of the program, including BDA, Contractor and Commonwealth staff.
• Communicate security risk, engineering and compliance related information to a wide range of stakeholders from individual contributors and team leads through to senior leadership other senior risk owners.
• Assist in the design, verification and validation of security enforcing functions within ICT environments including MQ-28 Ground Segment, Labs and other secure environments.
• Conduct continuous monitoring, auditing, security testing and assurance on Program systems, including but not limited to:
  • Identity and access management of all accounts on the system
  • Event logging, collection and aggregation activities
  • Security Incident Event Monitoring (SIEM) configuration, tuning and troubleshooting
  • System assurance during implementation, along with risk reporting into the program GRC team for system deficits
  • Monitor system performance and system capability reporting
  • Endpoint security and hardening
  • Patch Management verification
  • Vulnerability scanning
  • Secure data transfer compliance and assurance
  • Familiarity with COMSEC and other government security or high assurance equipment
  • Incident response and digital forensics
  • Creation and maintenance of documentation of the environment's configuration and operational processes.

• Conduct on the job training (OTJ) and briefings on system and security related topics as needed.
• Being focused on solution-oriented outcomes, enabling the Program while meeting the System accreditation requirements as the highest priority.
• Empower a culture of safety, security and compliance across the business.

Experience/Qualifications

• This position requires an active Australian Security Clearance at the NV1 Level with the ability to upgrade to NV2.
• Experience with deployed systems as an ITSO or System Administrator will be highly regarded.
• Experience in deployed environments and test environment workspaces will be highly regarded.
• It is likely that a candidate may have a diploma or degree in cyber security, IT or related discipline.
• Industry certifications are highly desirable such as CISSP, CRISC, CISM, SANS certification, 27001k Lead Auditor or Implementer certification or exposure, formal DFIR training (highly regarded) and/or other cyber security certifications.
• Highly organized, task oriented, self-starter that demonstrates initiative.
• The ability to communicate and collaborate with a diverse team, in a conscientious and inclusive way is valued by our team.
• Previous experience in a similar role is highly desirable.
• Applicants must be Australian Citizens to meet defence security requirements.

Equal Opportunity Employer:
We are an equal opportunity employer. We do not accept unlawful discrimination in our recruitment or employment practices on any grounds including but not limited to; race, color, ethnicity, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military and veteran status, or other characteristics covered by applicable law.
We have teams in more than 65 countries, and each person plays a role in helping us become one of the world's most innovative, diverse and inclusive companies. We are proud members of the Valuable 500 and welcome applications from candidates with disabilities. Applicants are encouraged to share with our recruitment team any accommodations required during the recruitment process. Accommodations may include but are not limited to: conducting interviews in accessible locations that accommodate mobility needs, encouraging candidates to bring and use any existing assistive technology such as screen readers and offering flexible interview formats such as virtual or phone interviews.