Lead CAASM - runZero Cyber Security Technical Professional

Cyber Asset Attack Surface Management (CAASM) Specialist (runZero) role is required within the Cyber Security, Cloud and Networks Branch (CRB) to administer the CAASM capability. SFIA Role Category and Skills Level: Secure infrastructure management - Technology Management (Secure Infrastructure Management) - IT Infrastructure (ITOP) - Level 5/6 Note: A merit list may be created from the shortlisted and interviewed candidates based on their performance and DFAT requirements. Additional Requirements Seller to acknowledge that DFAT has a Contractor stand-down period within December and January each year. Duration of the stand-down is at DFAT's discretion and usually for a period of 4 - 6 weeks. Key duties and responsibilities Cyber Asset Attack Surface Management (CAASM) Specialist (runZero) will administer, sustain and optimise DFAT’s CAASM capability, including runZero, to maintain reliable enterprise-wide asset visibility, platform performance and operational support. Key duties may include to: Administer, maintain and optimise CAASM platform capabilities. Monitor platform health, availability and operational performance. Support integrations with enterprise security, network, cloud, identity and asset data sources. Improve asset visibility, data quality and identification of unknown or unmanaged assets. Maintain operational documentation and support continuous service improvement. Produce governance, assurance and reporting outputs as required. Contribute to vendor, licence and service-management activities. Criteria The buyer has specified that each candidate must provide a response to each criterion. Each response is limited to 3000 characters. Essential criteria 1. Experience administering and supporting runZero or similar CAASM platform technology, including platform configuration, monitoring, upgrades and troubleshooting. 2. Experience managing platform integrations, data sources and system connectivity. 3. Knowledge of asset discovery and cyber asset visibility concepts. 4. Strong grasp of operating systems, networking and cloud environments, foundational networking protocols, network segmentation validation, unauthenticated network fingerprinting, and subnet tracing. 5. Experience writing logic to match CAASM unauthenticated network fingerprints with authenticated data from internal systems (data reconciliation and deduplication). 6. Experience maintaining technical documentation, operational procedures and service support activities with strong analytical, problem-solving and stakeholder engagement skills. Desirable criteria 1. Competency with REST APIs, webhooks, and automation scripting (e.g., Python, PowerShell). 2. Background in cyber operations, technology governance or risk management. 3. Experience with cyber frameworks including PSPF and ISM. 4. Strong understanding of vulnerability management concepts, including discovery, scoring, prioritisation, and remediation and previous familiarity with a range of cybersecurity technologies. Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited More than 10 Number of candidates submitted Fewer than 10 RFQ closing time 02 Weeks 00 Days 06 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia