Senior Cyber Exposure Lead

Singapore Telecommunications; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Employee discounts

Flexible work

On-site campus facilities

Connected leave days

Parental leave (up to 16 weeks)

Professional development via Optus U

Diversity networks

24/7 wellbeing counselling

Job summary

Optus is seeking a senior cybersecurity professional to lead exposure management across its external attack surface and internal vulnerability landscape. You will drive end-to-end processes from discovery through remediation, collaborating with infrastructure, cloud, engineering and application teams to reduce risk and enhance resilience.

You will apply MITRE ATT&CK knowledge, employ automation for analytics, and engage stakeholders to translate technical findings into actionable business risk

Qualifications

• Experience leading exposure and vulnerability management programs.
• Strong understanding of modern enterprise tech, cloud, containers and APIs.
• Proficient in security analytics and scripting for automation.
• Familiarity with MITRE ATT&CK and threat intelligence.

Responsibilities

• Lead continuous threat exposure management across external attack surface and internal vulnerabilities.
• Discover and manage internet-facing assets, exposed services, APIs, cloud resources, and third-party dependencies.
• Drive end-to-end vulnerability management lifecycle: scan, triage, remediation tracking and verification.
• Prioritize exposures by exploitability and business impact, not just severity scores.
• Coordinate remediation activities across infrastructure, cloud, engineering and applications teams.

Skills

Exposure Management

Vulnerability Management

Attack Surface Management

Offensive Security

MITRE ATT&CK framework

Automation scripting

Stakeholder engagement

Communication skills

Cyber security qualifications

Education

Cyber Security or IT-related degree

OSCP, CISSP, GCIH, GWAPT or vendor certs

Tools

Tenable

Qualys

Rapid7

KQL

SQL

SPL

XQL

Job description

Optus is seeking a senior cybersecurity professional to lead exposure management across its external attack surface and internal vulnerability landscape. You will drive end-to-end processes from discovery through remediation, collaborating with infrastructure, cloud, engineering and application teams to reduce risk and enhance resilience.

You will apply MITRE ATT&CK knowledge, employ automation for analytics, and engage stakeholders to translate technical findings into actionable business risk