Lead Cyber Security Engineer
Summary
Contract role for a lead cyber security engineer specialising in CAASM with runZero, working onsite five days a week inside a major Federal Government department in Canberra. 12-month engagement with two 12-month extension options, NV1 security clearance required, starting 11 January 2027.
Contract: 12 months + 2 x 12-month extension options
Start Date: 11 January 2027
Working Arrangements: Onsite, 5 days per week (up to 40 hours)
Security Clearance: NV1 clearance
Applications Close: 16 November 2026
Bridge IT Engineering is seeking an experienced Lead Cyber Security Engineer – CAASM / runZero Specialist to join a major Federal Government department in Canberra. This is an excellent opportunity for a highly skilled cyber security professional to lead the administration, sustainment and optimisation of an enterprise Cyber Asset Attack Surface Management (CAASM) capability, supporting critical cyber security operations and improving visibility across complex ICT environments.
Key Responsibilities- Administer, maintain and optimise enterprise CAASM platforms, including runZero.
- Monitor platform health, performance, availability and operational effectiveness.
- Manage integrations across security, network, cloud, identity and asset management systems.
- Enhance enterprise asset visibility, identifying unknown, unmanaged and potentially vulnerable assets.
- Develop and maintain asset reconciliation, correlation and deduplication processes.
- Support network discovery, fingerprinting and segmentation validation activities.
- Maintain technical documentation, operational procedures and service management processes.
- Produce technical reporting, governance and assurance documentation.
- Contribute to continuous improvement, vendor engagement and platform lifecycle management.
- Demonstrated experience administering runZero or similar CAASM technologies, including configuration, monitoring, upgrades and troubleshooting.
- Strong understanding of cyber asset discovery, attack surface management and enterprise asset visibility.
- Experience integrating cyber security platforms with enterprise systems and multiple data sources.
- Strong technical knowledge of networking, operating systems, cloud environments and network protocols.
- Practical experience with unauthenticated network fingerprinting, subnet tracing and network segmentation.
- Experience developing logic for asset correlation, data reconciliation and deduplication.
- Excellent analytical, troubleshooting, documentation and stakeholder engagement skills.
- Experience with REST APIs, webhooks and scripting using Python or PowerShell.
- Background in cyber security operations, vulnerability management or technology risk.
- Knowledge of Australian Government security frameworks, including PSPF and ISM.
- Experience with vulnerability discovery, scoring, prioritisation and remediation.
- Relevant industry certifications such as CISSP, CISM or CompTIA Security+.