Senior Cyber Exposure Lead - Flexible/Remote

Singtel; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Flexible work arrangements

Hybrid work model

Wellbeing and support programs

Employee discounts

Job summary

Optus is seeking a senior exposure management professional to lead threat exposure initiatives across its external attack surface and internal vulnerabilities. You will coordinate with infrastructure, cloud, engineering and application teams to drive remediation and improve cyber resilience.

You will apply attack-path analysis and threat intelligence to focus efforts on genuine risk, producing actionable detections and security controls, with a flexible hybrid work arrangement in Australia.

Qualifications

• Extensive experience in Exposure Management, Vulnerability Management, Attack Surface Management or related cyber security.
• Hands-on experience managing exposure lifecycle from discovery through remediation and risk reduction.
• Deep understanding of modern enterprise tech including cloud, containers, APIs, CI/CD and identity systems.

Responsibilities

• Lead continuous threat exposure management across Optus' external attack surface and internal vulnerability landscape.
• Manage discovery and remediation of internet-facing assets, exposed services, APIs, cloud resources and third-party dependencies.
• Drive end-to-end vulnerability management lifecycle including scanning, triage, prioritisation, remediation tracking and verification.

Skills

Exposure Management

Vulnerability Management

Attack Surface Management

Offensive Security

Cyber security

MITRE ATT&CK

KQL

SPL

SQL

XQL

Education

Cyber Security degree

Information Technology

Computer Science

Tools

Tenable

Qualys

Rapid7

Job description

Optus is seeking a senior exposure management professional to lead threat exposure initiatives across its external attack surface and internal vulnerabilities. You will coordinate with infrastructure, cloud, engineering and application teams to drive remediation and improve cyber resilience.

You will apply attack-path analysis and threat intelligence to focus efforts on genuine risk, producing actionable detections and security controls, with a flexible hybrid work arrangement in Australia.