Senior Cyber Security Testing Lead

Australian Energy Market Operator (AEMO); Western Australia; Remote; AUD 130,000 - 180,000; Full time

Benefits offered by this job

Flexible working

Professional development

Volunteering leave

Performance bonuses

Wellness program

Job summary

AEMO’s Cyber Defence team safeguards critical energy systems and market operations from cyber threats, with a flexible location. The role leads security testing across applications and infrastructure, including cloud environments, and collaborates with government and energy sector partners to embed secure-by-design practices.

You will guide vulnerability management, risk assessment, and incident response on an on‑call rotation, helping to uplift the testing capability across the function.

Qualifications

• Certification in offensive security (OSCP or equivalent) is highly regarded.
• Ability to lead end-to-end security testing engagements from scoping to remediation guidance.
• Experience across web apps, APIs, networks, cloud (Azure) and mobile/thick-client environments.

Responsibilities

• Lead the scoping of testing engagements with asset owners and stakeholders.
• Perform hands-on security testing and clearly report vulnerabilities with remediation guidance.
• Research-driven testing of internal tooling to assess security posture before/after deployment.
• Peer review scopes and reports to ensure technical accuracy and consistency.
• Develop and maintain testing processes and playbooks for the team.

Skills

OSCP

Offensive security

Threat emulation

Vulnerability management

MITRE ATT&CK

Reporting & remediation

Tools

Microsoft Azure

Active Directory

Job description

AEMO’s Cyber Defence team safeguards critical energy systems and market operations from cyber threats, with a flexible location. The role leads security testing across applications and infrastructure, including cloud environments, and collaborates with government and energy sector partners to embed secure-by-design practices.

You will guide vulnerability management, risk assessment, and incident response on an on‑call rotation, helping to uplift the testing capability across the function.