Team Leads - Cyber Platforms & Security Operations Centre
Canberra, ACT, AU
Job Details
EMPLOYMENT TYPE - Ongoing Full time
LOCATION - ACT
AFP BAND & SALARY - Band 08 ($132,185.00 - $143,883.00)
JOB REFERENCE NUMBER - 15958
This advertisement is to fill current vacancies and create a merit list for future ongoing or non-ongoing vacancies arising over the next 12 months.
Did you know?
The mission of the Australian Federal Police is to provide dynamic and effective law enforcement to the people of Australia. It provides policing throughout Australia in relation to the prevention and detection of crimes against the Commonwealth, its laws and integrity, and community police services to the Community of the ACT.
Working for the AFP provides you with a diverse and rewarding career. Whether you immerse yourself in a position on the frontline, or provide critical operational or professional support, the work you do makes a big impact on the people of Australia.
We’re committed to looking after you, with some of the best benefits and conditions in the industry – including (but not limited to):
- Six weeks (30 days) of paid annual leave per year + additional paid Christmas stand down
- 4 extra days of mandatory rest leave per year
- 18 days of paid personal leave per year
- Generous superannuation of 15.4%
- 18 weeks paid Parental Leave for Primary Caregiver (and 14 weeks for Secondary Caregiver) + additional unpaid leave entitlements for up until 24 months from the child’s date of birth or placement
- Generous salaries and incremental salary progression governed by the AFP Enterprise Agreement
- Flexible and hybrid working arrangements that support work-life balance
- Health & wellbeing services – with a focus on early intervention, education and prevention
- Access to ongoing training and professional development opportunities
What is the role?
The Technology Operations & Chief Information Officer Command (TOCIO) is seeking passionate and experienced applicants to join the Cyber Defence area as Team Leads to work within a strong team culture, where collaboration, trust, and shared accountability underpin how we operate. We are looking for leaders that will foster a positive team culture and work collegiately with the team, leadership group and stakeholders. The two opportunities are outlined below.
Team Lead Cyber Platforms Team
This team is responsible for building and managing cyber security observability, monitoring, and detections across the AFP's ICT environment, maintaining technical platforms and tooling used in cyber defence. The Cyber Platforms Team Leader will work alongside a cohort of Band 8 Team Leads to deliver Cyber Defence capabilities in alignment with business outcomes and user needs, reporting to the Cyber Defence Capability Coordinator. As the successful candidate you will have a thorough understanding of enterprise ICT systems and applications, ideally with experience in system monitoring and security event log collection and processing. You will implement and manage SIEM and SOAR platforms that underpin Security and Network Operations Centre capabilities. You are responsible for ensuring that these platforms are reliable, scalable, and tuned to deliver high-fidelity detection and efficient orchestration and actionable visibility across the ICT environments.
Team Lead Cyber Security Operations Centre (SOC)
AFP Cyber Security Operations Centre (SOC) is responsible for monitoring AFP systems, tools and other security platforms for signs of potential threats or suspicious activity. The SOC undertake the initial triage of alerts including reviewing and categorising events based on their severity, resolving minor cyber incidents and false positives and escalating incidents as required for further investigation and action. Continuously improving tooling and detection capabilities to enhance the AFP’s posture, the SOC provide advice to AFP stakeholders and is often the first point of contact during a cyber event.
For further information on these roles, please review the candidate information pack.
Essential Requirements
- You must be an Australian Citizen at the time of application
- A Negative Vetting 1 (Secret) security clearance or the ability to obtain one
- Strong leadership skills with the ability to manage and lead small to medium sized teams in the delivery of quality security services and systems whilst building a positive team culture.
- Proven ability to develop and deliver work plans with strategic technical and business deliverables
- Demonstrated experience in developing and implementing process enhancement
- Ability to contribute to reporting to management; written, analytical and statistical
Desirable Requirements
The following skills and/or experience would be highly regarded:
- Relevant qualification or demonstrable extensive experience in Cyber Security, or Computer Science
- Experience with implementing and maintaining SIEM/SOAR platforms
Additional Information
- Positions are based in Canberra ACT and applicants must be based there.
- When applying, you will be asked to nominate your preferred role. There will be an option to select no preference. Please note, the panel will make the final determination on the role/s you are found suitable for.
- No feedback will be provided to candidates who do not progress to the interview stage.
Selection Criteria
- Achieve results
- Communicates with influence
- Contributes to strategic thinking
- Cultivates productive working relationships
- Shows personal drive and integrity
- Technical knowledge and skills
Application
Please submit the following documents via our Jobs portal prior to the closing date and time:
- Resume/CV - This will form the basis for determining your suitability against the position requirements and give the panel a clear outline of your current knowledge and qualifications along with previous experiences. Please include your work history, responsibilities and achievements.
- Applicant pitch (maximum two pages). Ensure your pitch tells us why you are the best fit for the role, with examples that demonstrate your capabilities addressing the selection criteria, role requirements and work level standards for the role.
Only complete applications will be considered. Please review and ensure the uploaded documents are correct for this application after submitting your application.
Employment Suitability
Should you successfully progress from the application stage all applicants must:
- Complete an Employment Suitability Questionnaire (ESQ) and provide a traffic history check and proof of Australian citizenship. This aids in the assessment of your character and your ability to comply with the AFP's professional standards both in an official and private capacity. Please review our AFP Character Standards to ensure that you meet our requirements before you submit your application. Applicants will not receive feedback if they are unsuccessful at this gateway.
- Have your fingerprints taken if an offer of employment is made.
- Undertake mandatory drug testing for illicit drugs. This sample could include; urine, saliva or hair.
- Satisfactorily undertake a security clearance to the level specified for the position.
Recruitment Process
Applicants who have demonstrated their suitability for employment through their resume and application, may be asked to complete additional assessments or activities to determine suitability for the role. This may also include a formal interview. Using the relevant AFP work level standards as a guide, you may be asked a range of questions to demonstrate your skills and abilities. These could include behavioural based scenario questions. Read our guides for applicants to find out how to prepare for your interview.
Commitment to Diversity & Inclusion
We’re all individuals and we love that. At the AFP we value the different perspectives, approaches and lived experiences of our people, and recognise that our collective intelligence and diversity is what makes us stronger. As such, we encourage applications from people from all walks of life, including people from culturally and linguistically diverse backgrounds, First Nations people, women, the LGBTQIA+ community and people with disability.
Contacts and Closing Information
Contact Officer: Tijana Delov
Contact Officer Email: tijana.delov@afp.gov.au
Applications Close: 11:59pm (AEST) 04/06/2026
To view our other employment opportunities, please visit our career site.