Cyber Exercise Design Specialist

open to:
**Holders of Baseline Security Clearance**

**Location**:
**Canberra and Or Remote - 40 hour work week**

In this role, you will be developing multiple IT-focussed discussion exercise scenario packages including general ideas, special ideas, facilitator questions and evaluation guides.

The scenarios in these packages should be based on current tactics, techniques and procedures and utilise the nomenclature outlined in the MITRE ATT&CK framework. The packages should involve scenarios that could be used by technical IT cyber security teams, broader business/crisis/risk/executive-management teams or both.
- Develop multiple OT-focussed discussion exercise scenario packages including general ideas, special ideas, facilitator questions and evaluation guides. The packages should involve scenarios that could be used by technical OT cyber security teams, broader business/crisis/risk/executive-management teams or both.
- Develop multiple discussion exercise scenario packages that explore IT/OT convergence including general ideas, special ideas, facilitator questions and evaluation guides. The packages should involve scenarios that could be used by technical IT/OT cyber security teams, broader business/crisis/risk/executive-management teams or both.
- Develop multiple IT-focussed functional exercise scenario packages including general ideas, scenarios, timelines, master schedule of events, inject/control documents, technical artefacts and evaluation data collection templates and guides. The scenarios in these packages should be based on current tactics, techniques and procedures and utilise the nomenclature outlined in the MITRE ATT&CK framework. The packages should involve scenarios that could be used by technical IT cyber security teams, broader business/crisis/risk/executive-management teams or both.
- Develop multiple OT-focussed functional exercise scenario packages including general ideas, scenarios, timelines, master schedule of events, inject/control documents, technical artefacts and evaluation data collection templates and guides. The packages should involve scenarios that could be used by technical OT cyber security teams, broader business/crisis/risk/executive-management teams or both.
- Develop multiple functional exercise scenario packages that explore IT/OT convergence including general ideas, scenarios, timelines, master schedule of events, inject/control documents, technical artefacts and evaluation data collection templates and guides. The packages should involve scenarios that could be used by technical IT/OT cyber security teams, broader business/crisis/risk/executive-management teams or both.

**Essential criteria**
- Ability to develop discussion and functional exercise scenario packages including general ideas, scenarios, timelines, master schedule of events, inject/control documents, technical artefacts and evaluation data collection templates and guides.
- Ability to work with stakeholders to capture needs across the technical, process and resource domains.
- Ability to prepare reports including the presentation of findings and proposed solutions.
- High-level proficiency in the use of Microsoft Office suite products including: a. Word: styles, formatting, templates. b. Excel: referential formulae, financial planning and actuals records. c. PowerPoint: professional slide decks for Executive briefings; master layout changes. d. Project: schedule maintenance and analysis.

**Desirable criteria**
- Previous experience in the development, delivery and evaluation of exercises/training.
- Previous experience in the development, delivery and evaluation of cyber security exercises/training.