Senior Cyber Security Analyst - Vulnerability Posture Hybrid

NTT DATA, Inc.; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

NTT DATA, Inc. is seeking a Senior Cyber Security Analyst – Vulnerability Posture Management in Sydney.

You will lead vulnerability management, exposure management and secure configuration efforts across a complex enterprise environment, prioritising risks and driving remediation with stakeholders. The role emphasises hands-on security work, risk-based decision making and collaboration with architecture, infrastructure and security teams to improve compliance and assurance activities.

Qualifications

• Experience with enterprise vulnerability management platforms (Tenable, Qualys, Rapid7).
• Ability to lead vulnerability prioritisation and remediation planning.
• Strong knowledge of CIS Benchmarks and security baselines.

Responsibilities

• Conduct vulnerability assessments and security posture reviews across complex environments.
• Configure and run vulnerability scans using Tenable, Qualys or Rapid7.
• Prioritise risks using severity, exposure and business impact.
• Customise CIS Benchmarks to meet organisational requirements.
• Collaborate with infrastructure, application and security teams to remediate vulnerabilities.
• Support audits, compliance and control assurance activities.
• Communicate risk and remediation recommendations to technical and non-technical stakeholders.

Skills

Vulnerability management

Stakeholder management

Risk prioritisation

Security posture management

Security frameworks

Tools

Tenable

Qualys

Rapid7

Microsoft Defender

Microsoft Sentinel

Job description

NTT DATA, Inc. is seeking a Senior Cyber Security Analyst – Vulnerability Posture Management in Sydney.

You will lead vulnerability management, exposure management and secure configuration efforts across a complex enterprise environment, prioritising risks and driving remediation with stakeholders. The role emphasises hands-on security work, risk-based decision making and collaboration with architecture, infrastructure and security teams to improve compliance and assurance activities.