Profectus is seeking an experienced Lead CAASM Specialist (runZero) to administer and sustain a Cyber Asset Attack Surface Management capability within an Australian Government agency. You will be responsible for the runZero platform and its integrations, maintaining reliable enterprise-wide asset visibility as part of a cyber sustainment team. The work covers platform administration and upgrades, integration with security, network, cloud and identity data sources, asset data reconciliation and governance reporting.
Key Responsibilities
- Administer, maintain and optimise the runZero CAASM platform, including configuration, upgrades and troubleshooting
- Monitor platform health, availability and operational performance
- Build and support integrations with enterprise security, network, cloud, identity and asset data sources
- Write and maintain logic to match unauthenticated network fingerprints with authenticated data from internal systems
- Reconcile and deduplicate asset records to improve data quality
- Identify unknown or unmanaged assets across the enterprise network
- Validate network segmentation and trace subnets to confirm asset coverage
- Maintain operational documentation and procedures, and contribute to continuous service improvement
- Produce governance, assurance and reporting outputs
- Contribute to vendor, licence and service management activities
Required Experience
- Administering and supporting runZero or a similar CAASM platform, including configuration, monitoring, upgrades and troubleshooting
- Managing platform integrations, data sources and system connectivity
- Strong knowledge of asset discovery and cyber asset visibility concepts
- Strong grasp of operating systems, networking and cloud environments, including core networking protocols
- Network segmentation validation, unauthenticated network fingerprinting and subnet tracing
- Writing matching logic for asset data reconciliation and deduplication
- Maintaining technical documentation, operational procedures and service support activities
- Strong analytical, problem-solving and stakeholder engagement skills
Desirable Experience
- REST APIs, webhooks and automation scripting (e.g. Python, PowerShell)
- Background in cyber operations, technology governance or risk management
- Working knowledge of the PSPF and the Information Security Manual (ISM)
- Vulnerability management, including discovery, scoring, prioritisation and remediation
- Exposure to a range of cyber security technologies
- Industry certifications such as CISSP, CISM or CompTIA Security+, or runZero or related platform certifications
Security Clearance Requirements
- Must be an Australian Citizen
- Must have an AGSVA NV1 Security Clearance (or higher)
Working Arrangements
- Onsite
- Canberra
Why Profectus
Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.
#J-18808-Ljbffr
Lead CAASM Specialist (runZero) in Canberra employer: Profectus
Profectus is an exceptional employer, offering Infrastructure Engineers the opportunity to work within a dynamic and secure ICT environment that supports vital Australian Government services. With a strong focus on employee growth, Profectus fosters a collaborative work culture that encourages continuous improvement and innovation, while providing access to cutting-edge technologies and professional development opportunities. Located in the ACT, SA, or VIC, employees benefit from a supportive atmosphere that values long-term relationships and meaningful contributions to national outcomes.
