ACS RPL Sample for Cybersecurity Specialist (ANZSCO 262112)

Project Overview:
This project involved transitioning a legacy perimeter-based security model to a modern Zero Trust Architecture (ZTA) for a regional financial institution. The objective was to eliminate “implicit trust” and ensure that every access request was fully authenticated, authorised, and encrypted before granting access to the internal network.

My Responsibilities:

• Infrastructure Design: I designed the micro-segmentation strategy to isolate sensitive financial data from general corporate traffic, reducing the lateral movement capabilities of potential attackers.
• Identity & Access Management (IAM): I led the integration of Multi-Factor Authentication (MFA) and Single Sign-On (SSO) across all cloud and on-premise applications.
• Policy Development: I authored technical Report Writing Services guidelines for the “Principle of Least Privilege” (PoLP), ensuring users only had access to resources necessary for their specific job functions.
• Security Posture Validation: I utilised automated tools to continuously monitor device health and compliance before allowing network entry.

Technical Environment:

• Technologies: Palo Alto Networks (Prisma Access), Microsoft Azure AD, Okta, Cisco TrustSec.
• Methodologies: NIST 800-207 Zero Trust Framework, Agile Security Development.

Project Overview:
In this Sample project, I spearheaded the development and deployment of a comprehensive Incident Response (IR) framework for a large-scale e-commerce platform. The goal was to minimise the impact of security breaches and ensure the rapid recovery of critical business functions during a cyber-attack.

My Responsibilities:

• Threat Modelling: I conducted a comprehensive Case Study of previous security incidents to identify common attack vectors and developed customised “Playbooks” for Ransomware, DDoS, and Data Exfiltration.
• SIEM Integration: I managed the deployment of a Security Information and Event Management (SIEM) system (Splunk) to centralise logging and automate real-time alerting for suspicious activities.
• Stakeholder Coordination: I chaired the Computer Security Incident Response Team (CSIRT), coordinating communication between IT, Legal, and Public Relations departments during simulated “Tabletop” exercises.
• Forensic Analysis: I established protocols for post-incident forensic investigations to identify root causes and implement corrective actions to prevent recurrence.

Technical Environment:

• Technologies: Splunk Enterprise Security, Wireshark, Carbon Black (EDR), EnCase Forensic.
• Frameworks: ISO/IEC 27035 (Information security incident management), SANS Incident Response Process.