Senior Analyst - Cyber Security Testing

Australian Energy Market Operator (AEMO); Shire of Central Goldfields; Remote; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Volunteering leave

Annual bonuses

Wellness program

Discounted health insurance

Gym perks

Employee Assistance Program (EAP)

Job summary

Australian Energy Market Operator (AEMO) is seeking a senior Cyber Defence Tester to lead scoping and delivery of security testing across applications, infrastructure and cloud. You will coordinate with asset owners, report vulnerabilities with actionable fixes, and develop playbooks to strengthen the testing function.

Ideal candidates have offensive security credentials, hands-on testing across web apps, APIs, networks, AD and Azure, and experience in threat emulation and vulnerability

Qualifications

• One or more recognised offensive security certifications (OSCP desirable).
• Lead scoping and end-to-end testing engagements from objectives to remediation guidance.
• Proven offensive testing across web apps, APIs, networks, AD, cloud (Azure) and mobile.
• Strong understanding of adversary tradecraft and MITRE ATT&CK.
• Vulnerability management with risk-based prioritisation and remediation.

Responsibilities

• Lead the scoping of testing engagements across AEMO, liaising with asset owners and stakeholders to define boundaries, objectives and requirements.
• Conduct hands-on security testing across scoped engagements, identifying and reporting vulnerabilities with remediation guidance.
• Research-driven testing of tooling and platforms to assess security posture before and after adoption.
• Peer review test scopes and reports to maintain accuracy and consistency.
• Develop and maintain testing processes and playbooks for the team.

Skills

Offensive security

Test scoping

Vulnerability assessment

Threat emulation

Azure security

Tools

Microsoft Azure

Job description

Division: Digital

Department: Cyber & Security

Reference number: 13318

Engagement type: Permanent

AEMO at the Heart of Energy

AEMO is Australia’s independent energy system and market operator and system planner. AEMO’s purpose is to ensure safe, reliable and affordable energy today, and enable the energy transition for the benefit of all Australians. Australian governments are now committed to a net zero economy for Australia by 2050 and our vision is to enable this. We have the once-in-a-lifetime opportunity to co-design the future of our energy systems, and our core values revolve around character, commitment, and connection. Join us as we contribute to this significant transition in the energy sector.

About The Role

AEMO’s Cyber Defence team safeguards critical energy systems and market operations from advanced and emerging cyber threats. The team proactively identifies, assesses, and mitigates cyber risks through security testing, adversary emulation, threat intelligence, and vulnerability management. Further, Cyber Defence monitors, detects, and responds to incidents to protect operational integrity and continuity of critical IT systems.

The team collaborates closely with Australian Government agencies and energy‑sector bodies to uplift collective critical infrastructure security and partners with internal technology, engineering, and digital teams to embed secure‑by‑design practices and deliver cyber engineering and automation solutions. Together, these capabilities ensure AEMO remains secure, resilient, and well‑prepared in a rapidly evolving threat landscape.

As a senior member of the Cyber Testing and Vulnerability Management team, you will lead the scoping and delivery of security testing across applications, infrastructure and cloud, including research‑based testing of internally adopted and developed tooling. You will lift the capability of the testing function through peer review, playbook development and guidance to analysts, advise the vulnerability management and risk teams, assess complex vulnerability exceptions, and support incident response on an on‑call rotation.

The location of this role is flexible.

Please note that to be eligible for this role you require Australian citizenship and the ability to obtain and maintain a national security clearance.

What You Will Be Doing

• Lead the scoping of testing engagements across AEMO, liaising with asset owners and stakeholders to define engagement boundaries, objectives and requirements.
• Conduct hands‑on security testing across scoped engagements, identifying, validating and clearly reporting vulnerabilities with practical remediation guidance.
• Conduct research‑driven testing of internally adopted and internally developed tooling, assessing the security posture of new and emerging technology before and after it is brought into the environment.
• Peer review test scopes and reports authored by other testers to maintain technical accuracy and consistency across the team.
• Develop and maintain testing processes and playbooks for use by the testing team.

What You Will Bring To The Role

Experience and Knowledge

• One or more recognised offensive security certifications. OSCP (or equivalent) is desirable.
• Demonstrated ability to lead the scoping and delivery of testing engagements end to end, from defining objectives with asset owners through to reporting and remediation guidance.
• Proven offensive testing capability across several of the following: web applications, APIs, internal and external network infrastructure, Active Directory attack paths, cloud environments (Microsoft Azure), and thick‑client or mobile applications.
• Strong understanding of adversary tradecraft and adversary emulation models such as MITRE ATT&CK.
• Vulnerability management experience, including risk‑based prioritisation and the technical assessment of vulnerability exception requests.

Benefits

In return some of our benefits to you

• Flexible working: work from home, part time, job share, hybrid options, and additional leave options
• Professional development via projects, industry networks, job rotation, study assistance and more.
• Give back with up to 4 days of volunteering leave per year.
• Reward your hard work with annual performance bonuses (subject to eligibility).
• Embrace a healthier you with our wellness program, discounted health insurance, gym perks and our comprehensive Employee Assistance Program (EAP).

About Our Process

At AEMO we are committed to creating a diverse and inclusive workforce. We welcome people of all backgrounds, including people with disabilities and neurodivergence and those who identify as Aboriginal and/or Torres Strait Islander. If you have any accessibility requireme nt s to support you during the application or interview process, simply let us know by emailing us a t [e-mail]