Detailed JD *(Roles andResponsibilities)
Note: NV1 Clearance is Mandatory
Role: Security Analyst with 6+ years of hands-on experienceJob Summary: We are seeking a skilled and experienced Security Analyst to join our team. Theideal candidate will have a strong background in risk assessment and mitigation, identifyingsecurity vulnerabilities, and implementing solutions based on software design. This role requiresknowledge of security best practices for API development and preferred experience with securityframeworks and processes used in the Australian Taxation Office (ATO). Hands-on experience withAWS security tools and the ability to review code are highly desirable.Key Responsibilities: Conduct risk assessments and develop mitigation strategies. Identify and address security vulnerabilities in software design. Implement security best practices for API development. Utilize security frameworks and processes used in the ATO. Review and analyze code for security issues. Collaborate with development teams to ensure secure coding practices. Monitor and respond to security incidents. Stay updated with the latest security trends and technologies.Required Skills & Qualifications: Proficiency in risk assessment and mitigation. Ability to identify security vulnerabilities and solutions based on software design. Knowledge of security best practices for API development. Preferred experience with security frameworks and processes used in the ATO. Preferred hands-on experience with AWS security tools and ability to review code.Preferred Qualifications: Bachelor's degree in Computer Science, Information Security, or related field. Relevant certifications (e.g., CISSP, CEH) are a plus. Strong analytical and problem-solving skills. Excellent communication and teamwork abilities.Tools and Technologies Used: AWS security tools (e.g., AWS Shield, AWS WAF, AWS IAM) Security frameworks (e.g., NIST, ISO 27001) API security tools (e.g., OAuth, OpenID Connect) Code review tools (e.g., SonarQube, Checkmarx) Vulnerability assessment tools (e.g., Nessus, Qualys) Incident response tools (e.g., Splunk, ELK Stack)