External Exposure Security Analyst (EASM)

NCS Australia; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

NCS Australia is seeking a Cyber Security Analyst for a short-term contract in Sydney to analyze external exposure data and drive risk-based remediation. You will consolidate discovery data, map asset ownership, and coordinate with application, infrastructure, and business teams to validate critical relationships and prioritise actions.

The role focuses on building an exposure baseline, driving governance, and delivering actionable insights for senior cybersecurity leadership.

Qualifications

• Proven track record in EASM, threat exposure, or vulnerability risk analysis.
• Experience consolidating data from multiple security scanning platforms.
• Understanding of asset discovery lifecycle and risk governance.

Responsibilities

• Analyze large-scale external exposure data to establish an authoritative baseline.
• Consolidate, normalize, and de-duplicate asset discovery data into a single source.
• Reconcile external assets against internal registers to map ownership.
• Collaborate with application, infrastructure, and business teams to validate relationships.
• Evaluate findings to identify gaps, orphaned assets, and security risks.
• Define treatment recommendations and ownership for remediation.
• Maintain audit-ready records and support handover to operations.
• Deliver executive reporting on exposure trends and remediation progress.

Skills

External Attack Surface Analysis

Data Manipulation & Reconciliation

Asset Governance

Stakeholder Influence

Network & Infrastructure Security

Tools

SIEM

Vulnerability Scanners

Job description

NCS Australia is seeking a Cyber Security Analyst for a short-term contract in Sydney to analyze external exposure data and drive risk-based remediation. You will consolidate discovery data, map asset ownership, and coordinate with application, infrastructure, and business teams to validate critical relationships and prioritise actions.

The role focuses on building an exposure baseline, driving governance, and delivering actionable insights for senior cybersecurity leadership.