Senior Offensive Security Analyst

Peoplebank; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work

Career progression

Wellbeing focus

Job summary

Peoplebank in Sydney, Australia is seeking a highly technical security professional to identify and validate vulnerabilities before attackers can exploit them. You’ll join a high-performing cyber team tackling real-world challenges across a large enterprise environment, balancing offensive testing with enterprise risk remediation.

The role focuses on vulnerability management, application security, and exposure management, with opportunities to work on bug bounty submissions and emerging attacker

Qualifications

• Experience in offensive security and vulnerability management
• Hands-on with web and API security testing
• Familiarity with bug bounty programs and responsible disclosure
• Strong understanding of OWASP Top 10 and attack techniques
• Ability to drive remediation through stakeholder engagement
• Experience in enterprise-scale security environments

Responsibilities

• Identify and validate vulnerabilities before attackers exploit them
• Analyze web applications, APIs, and internet-facing surfaces for weaknesses
• Review bug bounty submissions and verify findings
• Collaborate with engineering and security teams to remediate risks
• Stay updated on emerging attacker techniques and exploitation methods
• Assist in shaping vulnerability management and exposure strategies

Skills

Offensive Security

Vulnerability Management

Threat Exposure Management

Application Security

Bug bounty programs

Stakeholder engagement

Tools

Tenable

Nessus

Qualys

Rapid7

Burp Suite

Job description

• Play a frontline role identifying and validating vulnerabilities before attackers can exploit them.


• Join a high-performing cyber team where you'll work on real-world security challenges across a large-scale enterprise environment

Why Join?

This is an outstanding opportunity for a technically minded cyber security professional who enjoys thinking like an attacker while influencing security outcomes at an enterprise scale.

As organisations continue to place increased focus on proactively reducing cyber risk, exposure management has become one of the most critical and visible functions within modern security teams. You'll join a business that is heavily investing in its cyber capabilities, providing long-term career growth, exposure to emerging threats, and opportunities to develop into a recognised subject matter expert.

Reward & Benefits

• Hybrid working environment


• Clear progression pathways into senior technical and leadership positions


• Outstanding salary and employee benefits, with a strong focus on social connection, health, and mental wellbeing

The Opportunity

This is a highly technical role sitting at the intersection of vulnerability management, ethical hacking, application security and cyber exposure management.

You will regularly analyse:

• Web application vulnerabilities


• API security weaknesses


• Internet-facing attack surfaces


• Bug bounty submissions


• Critical and zero-day vulnerabilities


• Emerging attacker techniques and exploitation methods

Success in this role comes from having the curiosity and technical capability to think like an attacker while partnering with internal stakeholders to improve security outcomes across the organisation.

Skills & Experience

To be successful in this role, you'll ideally possess:

• Strong experience within Offensive Security, Vulnerability Management, Threat Exposure Management or Application Security.


• Hands-on experience with tools such as Tenable, Nessus, Qualys, Rapid7 or similar platforms.


• Strong Burp Suite experience with the ability to validate and reproduce findings.


• Deep understanding of OWASP Top 10, web application vulnerabilities and API security.


• Experience assessing exploitability, attacker techniques and real-world risk.


• Exposure to Bugcrowd, HackerOne or other vulnerability disclosure programs.


• Knowledge of penetration testing, ethical hacking, red teaming or offensive security methodologies.


• Strong stakeholder engagement skills and experience driving remediation outcomes across technical teams.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.