Cyberworthiness Security Analyst | RAAF Base Amberley

Cyberworthiness Security Analyst

Posted on 10-Nov-2026

Application Close Date: 24-Nov-2026

Location:	RAAF Base Amberley
Category:	Engineering / Technical
Position Type:	Permanent
Job Reference:	BOE/1956537A
Attachments:	No File Attached
Share This:

About us

Boeing Defence Australia is shaping the future of aerospace and delivering some of the nation's most important programs for the Australian Defence Force.

Joining us is a chance to make your mark, working with a diverse team that is united in pushing the boundaries of imagination and excellence.

We currently employ more than 2,500 people across 14 sites in Australia and three international locations and have a range of opportunities available as we plan for future growth.

The opportunity

We are seeking a talented Cyberworthiness System Analyst to join the team located at RAAF Base Amberley as part of the Air Combat Electronic Attack Sustainment Program (ACEASP) directly supporting the Growler and Super Hornet Air Combat capability. This position will work within the Cyberworthiness support element, with the ultimate goal of ensuring cyber hygiene and providing cyber assurance to the Royal Australian Air Force (RAAF).

Responsibilities:

Perform security risk assessments aligned to the Cybersecurity Risk Management Framework.
Conduct security authorisation and assessment activities for ICT systems.
Advise stakeholders on maintaining ICT security and authorisation, including the implications of required modifications.
Evaluate and respond to emerging security issues; evaluate capability risks/gaps and take and/or coordinate actions to meet objectives.
Participate in evaluation of process effectiveness and identify areas for improvement.
Deliver sound and timely information security design advice; recommend technological or procedural solutions to meet security control intent in support of engineering projects.
Analyse and determine the risk associated with potential vulnerabilities; identify root causes, prioritise threats, and recommend and/or implement corrective actions.
Test and deploy risk mitigation processes and tools; monitor outcomes and take action as required.
Create and maintain security policies, procedures, audits, and assessments.

Experience/Qualifications

Working knowledge of Australian Defence security frameworks and associated policies and procedures, including familiarity with the Australian Cyber Security Centre Information Security Manual.
An understanding of the development and implementation of information security practices in an engineering environment.
Understanding of ICT cybersecurity practice development and implementation.
Experience with the authorisation processes for Australian government (Defence) systems and developing associated authorisation document packs.
Strong written and verbal communication skills with the ability to clearly articulate complex security concepts to a broad and diverse audience.
Sound information security knowledge across some or all of the following environments is desirable:
Network connectivity and configuration.
Windows client-server systems.
Linux client-server systems.
Support and maintenance of in‑house hardware/software systems.
Engineering Change Management processes.
A desire to work as part of a dynamic team supporting a diverse range of technology.
Industry-recognised information security qualification (CISSP, CRISC, ISO 27001, IRAP, etc.) and/or relevant experience.
Ability to obtain a Security Clearance — the preferred applicant will be required to successfully undergo the security clearance vetting process for Negative Vetting Level 2. The preferred applicant MUST be willing to disclose all relevant and required information and MUST have lived in Australia, or have a checkable background, for at least the preceding ten years.

Culture

We are committed to building a diverse and inclusive workplace. Female applicants, people of Aboriginal or Torres Strait Island descent and ex-defence personnel are encouraged to apply.

Benefits