Cyber Security Specialist - Operations

About this role

This is a fixed term, full-time position commencing in November 2026 up until July 2028 with possible extension (12 months) and/or permanency

The School Curriculum and Standards Division provide administrative and secretariat services for, and implements the decisions of the School Curriculum and Standards Authority (the Authority). The Authority provides quality curriculum, assessment and standards to enable all Western Australian students to become confident, creative learners and active, informed citizens who contribute positively to society.

The Role

The Cyber Security Specialist - Operations is responsible for leading and enhancing the Authority’s cyber security operational capability across cloud and on-premises environments. The role oversees security monitoring, threat detection, threat intelligence, incident response and the ongoing management of the Authority’s Security Information and Event Management (SIEM) platform. Working closely with technical teams and service providers, the position provides expert technical advice on translating cyber security policies, standards and frameworks into effective operational controls, while monitoring, auditing and continually improving the Authority’s cyber security posture.

The Cyber Security Specialist - Operations provides expert advice to management and executive stakeholders on cyber security risks, threats, trends and mitigation strategies. The role identifies control gaps, leads security investigations and supports the Authority’s response to cyber security incidents. The successful applicant will be able to understand business objectives and operational requirements, adapting security controls and risk treatments to balance security, usability and organisational outcomes while minimising cyber risk and ensuring compliance with government security frameworks and standards.

Professional Benefits

We are conveniently located in *Cannington*and our employees enjoy a range of benefits which include:

• 12% employer contributed superannuation.
• Flexible working arrangements are genuinely considered to create healthy work life balance including; working from home or remote, flexible working hours and part-time arrangements.
• Generous leave entitlements including annual, personal, long service and parental leave.
• Professional development opportunities and study leave/assistance.
• Access to salary packaging (in accordance with relevant industrial instruments).

Want to know more?

Full details of the role, selection criteria and training requirements are listed in the attached Job Description Form (JDF).

For more information about this opportunity, please contact Dean Scott, Manager, Information Systems ECT on (08) 9442 9413 or by emailing dean.scott@education.wa.edu.au

*Agency Referrals:*Public sector agencies seeking to refer surplus employees should contact Recruitment at centralservices.recruitment@education.wa.edu.au during the advertising period.

We are committed to building the leadership capability of our people (**Building Leadership Impact).

Equity and Diversity

We are committed to an inclusive and culturally responsive workforce reflecting the diversity in our workplaces and the Western Australian community. We welcome and encourage applications from Aboriginal and Torres Strait Islanders, young people, people of diverse sexualities and genders, people with disability, and people from culturally and linguistically diverse backgrounds.

Explore our Equity, Diversity and Inclusion Plan 2021-2025 for more details.

Eligibility

To work with us, you must

• be an Australian or New Zealand citizen, permanent resident or have a valid visa with relevant work rights for the term of the appointment.
• consent to a Nationally Coordinated Criminal History Check and obtain a current Screening Clearance Number issued by the Department of Education’s Screening Unit before you start.
• hold a tertiary qualification in information technology/cyber security, relevant industry qualifications or equivalent extensive experience.

More information about employment eligibility can be found on our website and in the attached Job Description Form (JDF).

Application Instructions

Apply online in two easy steps

Step 1: Select Apply for Job

Complete the online application form, including details of two (2) work related referees, preferably one being your current line manager.

Step 2: Attach your documents

Your application should include

• A CV of up to five (5) pages outlining your employment history and professional learning summary relevant to this position
• A four (4) page statement addressing the following selection criteria as outlined in the attached JDF:
• Demonstrated extensive experience and knowledge of information technology and cyber security, including principles, concepts and current trends with specific knowledge and experience relevant to large corporate or government environments using on-premises and cloud-based technologies.
• Demonstrated experience in integrating systems and technologies into a Security Operations Centre (SOC) environment, with a strong understanding of SOC workflows, monitoring capabilities, and incident response processes.
• Demonstrated experience managing a Microsoft Sentinel Security Information and Event Management (SIEM), ideally at enterprise scale.
• Demonstrated experience with Cyber Threat Intelligence, Threat Hunting, Detection Engineering, Threat Intelligence Platforms and Security Incident Response.
• High-level knowledge of Australian Government policies and frameworks, in particular, the Australian Cyber Security Centre’s (ACSC) Essentials Eight, National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) and Australian Signals Directorate’s (ASD) Information Security Manual.
• Demonstrated high-level verbal and written communication and interpersonal skills with the ability to effectively liaise with key internal and external stakeholders at a senior level, and to build and maintain strong relationships.
• Demonstrated strong work ethic and the ability to proactively manage own workload and tasks to deliver outcomes as part of a small, dynamic team.

It is recommended you have your attachments ready before selecting Apply for Job.

Your application must be received before the closing date and time. Late applications will not be accepted.

For technical support submitting your application, you can call the Department of Education’s Recruitment team on (08) 9264 4127 for assistance.

Advertised Vacancy Number: DOE1058826

Applicants assessed as suitable may be considered for similar vacancies that arise in our branch within the next 12 months. This includes circumstances where this position becomes subsequently vacant should the successful applicant decline or vacate the advertised position.

The Department applies a four (4) day breach period to this selection process.

Applications close: 4.30pm (AWST) on Friday, 28 August 2026

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.