Careers in Cyber Operations Defence Signals Directorate 1
In a game where our adversaries operate with no rules and unknown boundary lines, you will be exploring the possibilities and inventing the seemingly impossible. Contents Do you want to play the game no one else can? 5 Want to operate in the slim area between the difficult and the impossible? 6 What s the difference between DSD and any other career in IT security? 7 Security Software Developers 9 Technical Security Specialists 11 Cyber Analysts 13 Working for the Department of Defence 14 Working in Canberra 14 How to apply 14
Our adversaries are often well resourced, highly skilled and able to conceal themselves. Do you want to play the game no one else can? Get behind the scenes of the Australian Government s front line of defence against sophisticated foreign hackers. Our adversaries are often well resourced, highly skilled and able to conceal themselves. Defence Signals Directorate (DSD) is in the business of safeguarding Australia s government information networks and collecting foreign electronic and digital intelligence known in our business as signals intelligence. As the Internet continues to expand as a global hub for business, cyber and information security is now a top national security priority. Cyber Operations in DSD is dedicated to ensuring our government can operate in cyber space with confidence. We are committed to staying ahead of the swift pace demanded by the evolving digital world. Our staff use some of the world s most cutting edge technology and high powered computing resources. This is your chance to be at the forefront of our country s cyber security unlike any other job in Australia. 5
Want to operate in the slim area between the difficult and the impossible? In a game where our adversaries operate with no rules and unknown boundary lines, you will be exploring the possibilities and inventing the seemingly impossible. In our work, our moves are meticulous, audacious and stealthy. We need pioneers that can push the technical boundaries and cope with the unknown. Our work involves a journey to the very depths of operating systems, complex networks and IT security fundamentals we are inventing products and solutions that are years ahead of their time. What s the difference between DSD and any other career in IT security? Our mission is to Reveal Their Secrets Protect Our Own. And that s just what you ll do. You will have resources at your fingertips that you wouldn t have any where else. We can provide specialised training and you ll work on unique projects for key government clients. You ll work in a team protecting government information from those who seek it most. What can be a greater cause than that? Make your move, satisfy your curiosity, play the game no-one else can. 7
Ben, 26, studied a Bachelor of Computer Science before applying for a job in DSD Cyber Operations It is exciting to think that I m doing a job that I can t do anywhere else. I like the fact that I get to contribute to more than just making money for industry. I enjoy being a software security developer because I work in an interesting field with good career prospects. There is always something new: I m often working on difficult problems that have not been solved before. I have had the chance to learn from experts in the field both formally and informally and am on the way to becoming a leader myself. DSD has provided me with the opportunity to get hands on with some cool hardware and software. My job offers exceptionally interesting work with serious wow-factor and the people are great to work with! Security Software Developers Cyber criminals are using increasingly sophisticated technology and using it to trap unsuspecting victims. Cyber security must become predictive rather than reactive to counter these intrusions. This has spurred a great deal of innovation and we are seeing more sophisticated operating systems, networks and security systems. Features such as ASLR, DEP, KPP, mandatory driver signing, DNSSec, CSP, and many more, are changing the security landscape. DSD is looking for security-savvy software developers interested in low-level programming languages and operating system internals. You ll be able to design and build secure and robust software systems that are logical and based on sound design principles. You ll also have the skills or aptitude to reverse-engineer software, discover vulnerabilities that may be exploited by a hacker, and identify ways that systems can be defended. This is no ordinary software developer role. It merges software development and IT security in new and crafty ways, and involves complex networks and IT security fundamentals. You ll develop an understanding of the latest security features in IT systems and how to use them effectively. You ll have the opportunity to research new ideas and analyse the latest techniques used by both hackers and defenders. We need techies who can put themselves in the shoes of a hacker to understand how hackers exploit vulnerabilities and bypass security; and who can use that knowledge to put in place protection against such attacks. 9
Alex, 35, has built a career at DSD as a technical security specialist. After uni I was working as a software developer but wanted to get into the information security business. I knew the Defence Signals Directorate was an organisation that worked at the forefront of information security, so it was the obvious choice. In my job as a technical security specialist, I get to focus on combining my information security and programming knowledge. I m exposed to formidable information security problems that need deeply technical solutions. Developing these solutions is the most challenging part of my job but also the most rewarding. I ve been lucky enough to work on projects that just don t exist outside the intelligence community. Some projects are so unique I m constantly reminded of the size of the playing field we are operating in. Technical Security Specialists To people in the cyber security industry, it seems like we are in a battle that defenders are destined to lose, as the number of reported threats and compromises increases exponentially. We look at this differently. Now more than ever, increased awareness of the cyber security problem presents us with opportunities to improve the security of government using innovative and effective techniques. In order to protect Australian systems from a persistent and increasing cyber threat, we need energetic and passionate information security specialists who want to use their knowledge of white and black hat techniques for good. If you are into implant detection, malware reverse engineering and vulnerability discovery, you ll love what we do. DSD is looking for people who are passionate about breaking and securing computer systems. You ll undertake technical investigations of serious and sophisticated cyber intrusions against Australian government computer systems, conduct penetration testing of information systems, and use your knowledge of offensive and defensive techniques to protect Australian interests. We need good technical specialists who are willing and able to immerse themselves in the murky world of cyber security to help us stay ahead of hackers. 11
Stacey, 28, works in the fast-paced environment of the Cyber Security Operations Centre as a cyber analyst. I have been working as a cyber analyst for just over a year now, and work right in the middle of the action in the Cyber Security Operations Centre. I help out government users with identifying intrusions and threats to their networks, but this is easier said than done! Given the pace of information technology, providing the right advice when there are so many different systems and users really keeps me on my toes. My team and I work at the pointy end of information security. Cyber analysts can t be afraid to get in there and get their hands dirty to sort out complex security issues. It is encouraging to know the work I do ensures government information remains secure. I have a background in Information Technology, and while the work is technical, I have found analytical skills are equally important in this job. Cyber Analysts The integrity and confidentiality of government information is imperative. The Australian Government needs to know about the threats it faces while doing business on Internet-connected systems. Providing intelligence on foreign threats to government networks is crucial to allow government agencies to mitigate those threats. DSD s cyber analysts are on the front line in the battle to defeat these cyber threats in real time. As a cyber analyst you ll discover and analyse intrusion activity, and from this develop and expand knowledge of the technologies and techniques used by sophisticated hackers. If you enjoy lateral thinking and thrive on finding unconventional solutions, this job could be for you. We need top guns with a good balance of technical and analytical skills to help us detect and analyse unknown threat vectors and monitor their ongoing activities and capabilities. You will be burrowing deep into networks to search for anomalies and security threats, which requires strong networking and internet security skills. You will manage risks and work effectively as a member of a team to deliver intelligence to protect Australia s interests. 13
Working for the Department of Defence Working for the Defence Signals Directorate, you will be an Australian Public Service (APS) employee, and will play an important part in contributing to the defence of Australia and its national interests. Defence APS employees enjoy benefits such as generous superannuation and flexible working arrangements, which gives you the opportunity for a healthy social life. At DSD, suits and ties are optional we like to keep the focus on interesting projects, not fashion. Working in Canberra The Defence Signals Directorate is located in Canberra, the central hub for Australian Government agencies. Canberra enjoys all the services and benefits of other big cities but without the peak-hour traffic problems which means you get home sooner! With a population of over 300,000, Canberra is just two hours drive to the snow fields, two hours to the beach and three hours from Sydney. How to apply To apply visit our website www.dsd.gov.au and click on Cyber Operations Jobs. This is a rolling recruitment campaign. Applications can be submitted at any time, and are reviewed on a weekly basis. Due to the sensitive nature of the work undertaken at DSD, applicants must: be Australian citizens; have at least ten years checkable background; and undergo a security clearance. Commonwealth of Australia 2011 This work is copyright. Apart from any use as permitted under the Copyright Act 1968, no part may be reproduced by any persons without prior written permission from the Commonwealth. Requests and inquiries concerning reproduction and rights should be addressed to the Commonwealth Copyright Administration, Attorney General s Department, National Circuit, Barton ACT 2600 or posted at http://www.ag.gov.au/cca
Apply online www.dsd.gov.au