Senior Cyber Exposure Manager - Remote-Ready & Impactful

Narooma; Sydney; Hybrid; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Flexible work arrangements

Three days in the office, two days rem

Remote work options

Counselling services 24/7

Employee discounts

Job summary

Optus in Sydney is seeking a Senior Exposure Management professional to lead threat exposure management across the external attack surface and internal vulnerability landscape, coordinating with Directors and stakeholders to reduce cyber risk.

You will oversee discovery, triage, remediation tracking, and threat-informed prioritisation, partnering with infrastructure, cloud, engineering and security teams to implement detections and controls.

Qualifications

• Extensive experience in Exposure Management, Vulnerability Management, Attack Surface Management or related cyber security discipline.
• Hands-on experience managing exposure lifecycle from discovery through remediation and risk reduction.
• Strong understanding of modern enterprise tech, including cloud, containers, APIs and CI/CD.

Responsibilities

• Lead continuous threat exposure management across Optus' external attack surface and internal vulnerability landscape.
• Investigate and manage internet-facing assets, exposed services, APIs, cloud resources, certificates and shadow IT.
• Drive end-to-end vulnerability management lifecycle from scanning to remediation verification.

Skills

Exposure Management

Vulnerability Management

Attack Surface Management

Offensive Security

Cyber security

KQL

SPL

SQL

XQL

Threat Intelligence

MITRE ATT&CK

Stakeholder Engagement

Communication

Education

Cyber Security qualification

Information Technology

Computer Science

Tools

Tenable

Qualys

Rapid7

Job description

Optus in Sydney is seeking a Senior Exposure Management professional to lead threat exposure management across the external attack surface and internal vulnerability landscape, coordinating with Directors and stakeholders to reduce cyber risk.

You will oversee discovery, triage, remediation tracking, and threat-informed prioritisation, partnering with infrastructure, cloud, engineering and security teams to implement detections and controls.