Senior Cyber Security Testing Lead (App & Cloud)

Australian Energy Market Operator (AEMO); Shire of Central Goldfields; Remote; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Volunteering leave

Annual bonuses

Wellness program

Discounted health insurance

Gym perks

Employee Assistance Program (EAP)

Job summary

Australian Energy Market Operator (AEMO) is seeking a senior Cyber Defence Tester to lead scoping and delivery of security testing across applications, infrastructure and cloud. You will coordinate with asset owners, report vulnerabilities with actionable fixes, and develop playbooks to strengthen the testing function.

Ideal candidates have offensive security credentials, hands-on testing across web apps, APIs, networks, AD and Azure, and experience in threat emulation and vulnerability

Qualifications

• One or more recognised offensive security certifications (OSCP desirable).
• Lead scoping and end-to-end testing engagements from objectives to remediation guidance.
• Proven offensive testing across web apps, APIs, networks, AD, cloud (Azure) and mobile.
• Strong understanding of adversary tradecraft and MITRE ATT&CK.
• Vulnerability management with risk-based prioritisation and remediation.

Responsibilities

• Lead the scoping of testing engagements across AEMO, liaising with asset owners and stakeholders to define boundaries, objectives and requirements.
• Conduct hands-on security testing across scoped engagements, identifying and reporting vulnerabilities with remediation guidance.
• Research-driven testing of tooling and platforms to assess security posture before and after adoption.
• Peer review test scopes and reports to maintain accuracy and consistency.
• Develop and maintain testing processes and playbooks for the team.

Skills

Offensive security

Test scoping

Vulnerability assessment

Threat emulation

Azure security

Tools

Microsoft Azure

Job description

Australian Energy Market Operator (AEMO) is seeking a senior Cyber Defence Tester to lead scoping and delivery of security testing across applications, infrastructure and cloud. You will coordinate with asset owners, report vulnerabilities with actionable fixes, and develop playbooks to strengthen the testing function.

Ideal candidates have offensive security credentials, hands-on testing across web apps, APIs, networks, AD and Azure, and experience in threat emulation and vulnerability