Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm)

NCS Australia; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

NCS Australia is delivering an enterprise exposure management and asset visibility capability for a major Australian client. As a Senior Consultant, you will lead the technical design, deployment and handover of the platform, turning asset discoveries into a risk picture for security leadership.

This hands-on delivery role requires client exposure and collaboration with the practice lead and a senior consultant.

Qualifications

• Seven+ years in cyber security, with at least three in asset visibility, exposure management or vulnerability management delivery.

Responsibilities

• Design and deploy an agentless asset discovery and exposure management platform across IT, cloud, OT and unmanaged devices.
• Plan and execute safe active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption.
• Build and tune asset fingerprinting, classification and ownership models across a large, heterogeneous estate.
• Integrate discovery data with the client’s existing CMDB, vulnerability management, EDR and SIEM tooling via API.
• Develop risk prioritisation logic, dashboards and executive reporting that map findings to NIST CSF, the Essential Eight and the client’s regulatory obligations.
• Identify unmanaged, unagentable and end‑of‑life assets, and drive remediation plans with asset owners.
• Validate network segmentation integrity and map attack paths across IT and OT boundaries.
• Produce operational runbooks and transition the capability to the client’s BAU security team.

Skills

Asset visibility

Exposure management

Vulnerability management

CAASM platforms

Networking TCP/IP

Python scripting

REST API integration

Executive communication

Tools

Armis

Claroty xDome

Forescout

Nozomi Networks

Axonius

Tenable OT Security

Job description

Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm)

• Full-time
• Department: Digital Resilience

At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.

We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.

We are delivering an enterprise exposure management and asset visibility capability for a major Australian client with a converged IT, OT and IoT estate. You will lead the technical design, deployment and operational handover of the platform, and turn raw asset discovery data into a risk picture the client’s security leadership can act on.

This is a hands‑on delivery role with significant client exposure. You will work alongside the practice lead and a senior consultant, and you will be the technical authority on the engagement.

What you’ll do

• Design and deploy an agentless asset discovery and exposure management platform across corporate IT, cloud, OT and unmanaged device estates
• Plan and execute safe active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption
• Build and tune asset fingerprinting, classification and ownership models across a large, heterogeneous estate
• Integrate discovery data with the client’s existing CMDB, vulnerability management, EDR and SIEM tooling via API
• Develop risk prioritisation logic, dashboards and executive reporting that map findings to NIST CSF, the Essential Eight and the client’s regulatory obligations
• Identify unmanaged, unagentable and end‑of‑life assets, and drive remediation plans with asset owners
• Validate network segmentation integrity and map attack paths across IT and OT boundaries
• Produce operational runbooks and transition the capability to the client’s BAU security team
• Seven or more years in cyber security, with at least three in asset visibility, exposure management or vulnerability management delivery
• Hands‑on experience with one or more CAASM or asset intelligence platforms — for example Armis, Claroty xDome, Forescout, Nozomi Networks, Axonius, Sevco, JupiterOne, Lansweeper or Tenable OT Security
• Strong practical networking: TCP/IP, routing and switching, VLANs, network segmentation, and the ability to read a packet capture
• Working knowledge of OT and industrial protocols (Modbus, DNP3, BACnet, EtherNet/IP) and the operational sensitivities of scanning production control systems
• Experience integrating security tooling via REST APIs, with scripting in Python or PowerShell for data enrichment and reporting
• Familiarity with vulnerability management platforms such as Tenable, Qualys or Rapid7, and how asset context improves their output
• Ability to write clearly for both engineers and executives, and to hold your own in a room with a CISO
• Australian work rights; ability to obtain a Baseline or NV1 clearance is advantageous

Nice to have

• Exposure to Purdue model architectures and IEC 62443
• Prior consulting or systems integrator delivery experience
• Certifications such as GICSP, GRID, CISSP, OSCP, or vendor‑specific asset platform accreditations
• Experience in regulated industries — utilities, telecommunications, financial services, or critical infrastructure under the SOCI Act

Why NCS?

This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.

Ready to make extraordinary happen?

We celebrate diversity and inclusion

We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.

Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.

Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.