Contract Security Analyst - External Exposure

NCS Group Australia; Sydney; On-site; AUD 90,000 - 120,000; Full time

Job summary

NCS Australia is seeking a Security Analyst for a short-term contract engagement in Sydney, running from October through December 2026 with possible extensions. You will analyze external exposure data, consolidate asset information, and collaborate with cross-functional teams to drive risk-based remediation.

The role focuses on building a validated external baseline, prioritizing vulnerabilities, and delivering executive insights on exposure trends for cybersecurity leadership.

Qualifications

• Proven track record as Security Analyst in External Attack Surface Management (EASM).
• Ability to consolidate and de-duplicate large security datasets from multiple sources.
• Understanding of asset discovery lifecycle and threat modeling frameworks.
• Knowledge of IP routing, DNS, SSL/TLS, VPN architectures and cloud (GCP/AWS/Azure).
• Strong communication skills to coordinate with technical owners and remediation actions.
• Sydney-based and available to commence October 2026.

Responsibilities

• Analyze external exposure data to establish an authoritative baseline.
• Consolidate, normalize, and de-duplicate asset discovery data from multiple engines.
• Reconcile discovered assets against internal registers to identify ownership gaps.
• Collaborate with application, infrastructure, and business teams to validate relationships.
• Evaluate findings to identify risks and prioritize remediation actions.
• Define clear treatment recommendations including ownership and decommissioning.
• Maintain audit-ready records of findings and evidence for handover.
• Deliver reporting on exposure trends and remediation progress to leadership.

Skills

EASM experience

Data reconciliation

Asset management

Network security

Stakeholder engagement

Sydney-based

Tools

Security scanners

Job description

NCS Australia is seeking a Security Analyst for a short-term contract engagement in Sydney, running from October through December 2026 with possible extensions. You will analyze external exposure data, consolidate asset information, and collaborate with cross-functional teams to drive risk-based remediation.

The role focuses on building a validated external baseline, prioritizing vulnerabilities, and delivering executive insights on exposure trends for cybersecurity leadership.