External Attack Surface Analyst – 3-Month Sydney Contract

Eighty20 Solutions pty; Sydney; On-site; AUD 129,000 - 221,000; Part time

Job summary

NCS Australia is seeking a Cyber Security Analyst for a short-term contract in Sydney, October to December 2026, with possible extensions. You will analyze raw discovery data across our internet-facing infrastructure to build a validated External Exposure Baseline and support risk governance.

In this specialist technical role, you will normalize data, confirm asset ownership, prioritize vulnerabilities, and deliver clear findings and remediation recommendations to senior cybersecurity leadership.

Qualifications

• Experience as a Security Analyst focusing on External Attack Surface Management (EASM) or risk analysis.
• Ability to consolidate and de-duplicate large security datasets.
• Deep understanding of enterprise inventory management and threat modeling.
• Excellent communication to coordinate with technical owners and remediation actions.
• Knowledge of IP routing, DNS, SSL/TLS, VPN architectures and cloud (GCP/AWS/Azure).

Responsibilities

• Analyze large-scale external exposure datasets to establish an authoritative external attack surface baseline.
• Consolidate, normalize, and de-duplicate asset discovery data from multiple sources.
• Reconcile external assets against internal registers to identify ownership gaps and rogue environments.
• Collaborate with application, infrastructure, and business teams to validate relationships and criticality.
• Evaluate findings to identify systemic control gaps and prioritize remediation by risk and impact.
• Define clear treatment recommendations with ownership, acceptance, or decommissioning actions.
• Maintain audit-ready records of findings and evidence for operational handover.
• Deliver reporting on exposure trends and remediation progress for senior leadership.

Skills

Cyber Security

Exposure Analysis

Data Manipulation

Asset Governance

Network Security

Stakeholder Influence

Job description

NCS Australia is seeking a Cyber Security Analyst for a short-term contract in Sydney, October to December 2026, with possible extensions. You will analyze raw discovery data across our internet-facing infrastructure to build a validated External Exposure Baseline and support risk governance.

In this specialist technical role, you will normalize data, confirm asset ownership, prioritize vulnerabilities, and deliver clear findings and remediation recommendations to senior cybersecurity leadership.