Senior Analyst - Cyber Security Testing

Australian Energy Market Operator (AEMO); City of Melbourne; Hybrid; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Flexible working

Professional development

Volunteer leave

Job summary

AEMO's Cyber Defence team safeguards critical energy systems and market operations, conducting security testing, threat emulation, and vulnerability management. You will lead scoping, perform hands-on testing, and guide remediation while collaborating with internal tech groups and government partners.

The role requires on-call readiness, on-site collaboration when needed, and a focus on secure-by-design practices amid evolving cyber threats.

Qualifications

• OSCP or equivalent certification preferred.
• Experience leading end-to-end testing engagements and remediation guidance.
• Strong know-how of web apps, APIs, cloud and Active Directory attack paths.

Responsibilities

• Lead scoping of testing engagements with asset owners and stakeholders.
• Perform hands-on security testing and report vulnerabilities with remediation guidance.
• Research and test internal tooling for security posture.
• Peer review scopes and reports for accuracy and consistency.
• Develop and maintain testing processes and playbooks.

Skills

OSCP

Offensive testing

Threat emulation

Vulnerability management

Leadership

Azure cloud

AD attack paths

MITRE ATT&CK

Tools

Cyber testing tooling

Job description

AEMO is Australia’s independent energy system and market operator and system planner. AEMO’s purpose is to ensure safe, reliable and affordable energy today, and enable the energy transition for the benefit of all Australians. Australian governments are now committed to a net zero economy for Australia by 2050 and our vision is to enable this. We have the once-in-a-lifetime opportunity to co-design the future of our energy systems, and our core values revolve around character, commitment, and connection. Join us as we contribute to this significant transition in the energy sector.

About the role

AEMO’s Cyber Defence team safeguards critical energy systems and market operations from advanced and emerging cyber threats. The team proactively identifies, assesses, and mitigates cyber risks through security testing, adversary emulation, threat intelligence, and vulnerability management. Further, Cyber Defence monitors, detects, and responds to incidents to protect operational integrity and continuity of critical IT systems.

The team collaborates closely with Australian Government agencies and energy-sector bodies to uplift collective critical infrastructure security and partners with internal technology, engineering, and digital teams to embed secure-by-design practices and deliver cyber engineering and automation solutions. Together, these capabilities ensure AEMO remains secure, resilient, and well-prepared in a rapidly evolving threat landscape.

As a senior member of the Cyber Testing and Vulnerability Management team, you will lead the scoping and delivery of security testing across applications, infrastructure and cloud, including research-based testing of internally adopted and developed tooling. You will lift the capability of the testing function through peer review, playbook development and guidance to analysts, advise the vulnerability management and risk teams, assess complex vulnerability exceptions, and support incident response on an on-call rotation.

The location of this role is flexible.

Please note that to be eligible for this role you require Australian citizenship and the ability to obtain and maintain a national security clearance.

What you will be doing

Lead the scoping of testing engagements across AEMO, liaising with asset owners and stakeholders to define engagement boundaries, objectives and requirements.

Conduct hands-on security testing across scoped engagements, identifying, validating and clearly reporting vulnerabilities with practical remediation guidance.

Conduct research-driven testing of internally adopted and internally developed tooling, assessing the security posture of new and emerging technology before and after it is brought into the environment.

Peer review test scopes and reports authored by other testers to maintain technical accuracy and consistency across the team.

Develop and maintain testing processes and playbooks for use by the testing team.

What you will bring to the role

One or more recognised offensive security certifications. OSCP (or equivalent) is desirable.

Demonstrated ability to lead the scoping and delivery of testing engagements end to end, from defining objectives with asset owners through to reporting and remediation guidance.

Proven offensive testing capability across several of the following: web applications, APIs, internal and external network infrastructure, Active Directory attack paths, cloud environments (Microsoft Azure), and thick-client or mobile applications.

Strong understanding of adversary tradecraft and adversary emulation models such as MITRE ATT&CK.

Vulnerability management experience, including risk-based prioritisation and the technical assessment of vulnerability exception requests.

In return some of our benefitsto you

Flexible working: work from home, part time, job share, hybrid options, and additional leave options

Professional development via projects, industry networks, job rotation, study assistance and more.

Give back with up to 4 days of volunteering leave per year.

Reward your hard work with annual performance bonuses (subject to eligibility).

Embrace a healthier you with our wellness program, discounted health insurance, gym perks and our comprehensive Employee Assistance Program (EAP).

About Our Process

At AEMO we are committed to creating a diverse and inclusive workforce. We welcome people of all backgrounds, including people with disabilities and neurodivergence and those who identify as Aboriginal and/or Torres Strait Islander. If you have any accessibility requirements to support you during the application or interview process, simply let us know by emailing us at ••••@aemo.com.au

Hirer responsiveness Salary match Number of applicants

As the National Energy Market Operator and planner, AEMO plays an important role in supporting the industry to deliver a more integrated, secure, and cost effective national energy supply. AEMO operates the energy markets and systems and also delivers planning advice in eastern and south-eastern Australia. To learn more about AEMO and its Markets, please watch the above video.

AEMO is pleased to announce the release of its new corporate strategy. To find out more about where we will be focussing our resources over 2015-17, click here.

Source: This is an extract from the company's own website.

As the National Energy Market Operator and planner, AEMO plays an important role in supporting the industry to deliver a more integrated, secure, and cost effective national energy supply. AEMO operates the energy markets and systems and also delivers planning advice in eastern and south-eastern Australia. To learn more about AEMO and its Markets, please watch the above video.

AEMO is pleased to announce the release of its new corporate strategy. To find out more about where we will be focussing our resources over 2015-17, click here.

Source: This is an extract from the company's own website.

Torus Risk

8d ago

Cyber Analyst (No Experience)

9d ago

What can I earn as a Cyber Security Analyst