Cyber Exposure Lead: Threat & Vulnerability Management

Singtel Group; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible working arrangements

Monthly credit ($80)

25% off Optus products

Employee discounts

Job summary

Optus is seeking a senior cyber security professional to lead exposure and vulnerability management across their external attack surface and internal landscape. You will partner with Directors and stakeholders to drive risk-based remediation and resilience across cloud, on-prem, and applications.

The role emphasizes hands-on lifecycle management, collaboration with infrastructure and engineering teams, and ongoing tooling improvements to strengthen security postures.

Qualifications

• Experience in Exposure Management or related cyber security discipline.
• Hands-on lifecycle management from discovery through remediation and risk reduction.
• Strong knowledge of cloud, containers, APIs, CI/CD, and identity systems.
• Certifications such as OSCP/CISSP or vendor certs valued.

Responsibilities

• Lead continuous threat exposure management across Optus external attack surface and internal vulnerability landscape.
• Discover, investigate and manage internet-facing assets, exposed services, APIs, cloud resources, certificates, shadow IT and third-party dependencies.
• Drive end-to-end vulnerability management lifecycle: scanning, triage, remediation tracking and verification.
• Prioritise exposures by exploitability, business impact, attack-path reachability and threat intel.
• Coordinate remediation with infrastructure, cloud, engineering and application teams to improve cyber resilience.
• Collaborate with threat hunting, detection engineering and IR teams to translate findings into detections and controls.
• Drive continuous improvement across tooling, automation, reporting and processes.

Skills

Exposure management

Vulnerability management

Attack surface mgmt

Cloud platforms

Scripting & automation

MITRE ATT&CK

SQL / KQL

Education

Cyber Security / IT / CS degree or equivalent

OSCP

CISSP

GCIH

GWAPT

Tools

Tenable

Qualys

Rapid7

Job description

Optus is seeking a senior cyber security professional to lead exposure and vulnerability management across their external attack surface and internal landscape. You will partner with Directors and stakeholders to drive risk-based remediation and resilience across cloud, on-prem, and applications.

The role emphasizes hands-on lifecycle management, collaboration with infrastructure and engineering teams, and ongoing tooling improvements to strengthen security postures.