Senior Offensive Security Analyst - Vulnerability Leader

Peoplebank; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work

Career progression

Wellbeing focus

Job summary

Peoplebank in Sydney, Australia is seeking a highly technical security professional to identify and validate vulnerabilities before attackers can exploit them. You’ll join a high-performing cyber team tackling real-world challenges across a large enterprise environment, balancing offensive testing with enterprise risk remediation.

The role focuses on vulnerability management, application security, and exposure management, with opportunities to work on bug bounty submissions and emerging attacker

Qualifications

• Experience in offensive security and vulnerability management
• Hands-on with web and API security testing
• Familiarity with bug bounty programs and responsible disclosure
• Strong understanding of OWASP Top 10 and attack techniques
• Ability to drive remediation through stakeholder engagement
• Experience in enterprise-scale security environments

Responsibilities

• Identify and validate vulnerabilities before attackers exploit them
• Analyze web applications, APIs, and internet-facing surfaces for weaknesses
• Review bug bounty submissions and verify findings
• Collaborate with engineering and security teams to remediate risks
• Stay updated on emerging attacker techniques and exploitation methods
• Assist in shaping vulnerability management and exposure strategies

Skills

Offensive Security

Vulnerability Management

Threat Exposure Management

Application Security

Bug bounty programs

Stakeholder engagement

Tools

Tenable

Nessus

Qualys

Rapid7

Burp Suite

Job description

Peoplebank in Sydney, Australia is seeking a highly technical security professional to identify and validate vulnerabilities before attackers can exploit them. You’ll join a high-performing cyber team tackling real-world challenges across a large enterprise environment, balancing offensive testing with enterprise risk remediation.

The role focuses on vulnerability management, application security, and exposure management, with opportunities to work on bug bounty submissions and emerging attacker