Senior Security Consultant - Exposure Management

TheDriveGroup; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Job summary

TheDriveGroup is seeking a Senior Security Consultant to own an exposure management implementation across IT/OT/IoT. You will design, deploy and handover a robust platform, leading technical delivery with client-facing accountability.

You will bring 7+ years of cyber security experience, hands-on vulnerability and asset management expertise, and strong scripting, networking, and stakeholder engagement skills to drive risk-informed decisions.

Qualifications

• 7+ years of cyber security experience, including asset management.
• Hands-on implementation with asset discovery and exposure platform tech.
• Strong networking fundamentals across IT/OT environments.
• Scripting and API integration with Python or PowerShell.
• Experience with enterprise vulnerability management tools such as Tenable/Qualys/Rapid7.
• Excellent stakeholder engagement and client-facing communication.

Responsibilities

• Design and deploy enterprise asset discovery and exposure platforms.
• Improve visibility across IT, cloud, OT and unmanaged devices.
• Identify vulnerable, outdated and unmanaged assets.
• Plan and conduct safe asset scanning in sensitive environments.
• Integrate asset intelligence with CMDB, SIEM, EDR and vulnerability tools.
• Build risk dashboards, reporting and remediation priorities.
• Assess network segmentation and potential attack paths.
• Lead technical delivery and handover to operations security teams.

Skills

Cyber security

Asset management

Client facing

Scripting (Python)

Networking basics

Vulnerability tools

Tools

Armis

Claroty

Forescout

Axonius

Nozomi

Lansweeper

Job description

Senior Security Consultant - Exposure Management

Senior Security Consultant - Exposure Management
Location: Sydney Hybrid
Rate:Negotiable
Project: Enterprise Exposure Management Implementation

The opportunity
We're working with a major Australian organisation delivering a new enterprise exposure management and asset visibility capability across a complex IT, OT and IoT environment.

We're looking for an experienced Senior Cyber Security Consultant to take technical ownership of the implementation, from platform design and deployment through to integration and operational handover.

This is a hands‑on, client‑facing opportunity where you'll play a key role in helping the organisation identify its technology assets, understand security exposures and prioritise risk.

What you'll be doing

• Design and deploy enterprise asset discovery and exposure management platforms.
• Improve visibility across IT, cloud, OT and unmanaged devices.
• Identify vulnerable, outdated and unmanaged assets.
• Plan and conduct safe asset scanning across sensitive industrial environments.
• Integrate asset intelligence with CMDB, SIEM, EDR and vulnerability management platforms.
• Build risk dashboards, reporting and remediation priorities.
• Assess network segmentation and potential attack paths.
• Lead technical delivery and handover to operational security teams.

What we're looking for

• 7+ years of cyber security experience, including significant exposure to vulnerability or asset management.
• Hands‑on implementation experience with Armis, Claroty, Forescout, Axonius, Nozomi, Lansweeper or similar platforms.
• Strong networking fundamentals, including TCP/IP, VLANs, routing and network segmentation.
• Experience across IT and ideally OT or industrial environments.
• Scripting and API integration experience using Python or PowerShell.
• Experience working with enterprise vulnerability management tools such as Tenable, Qualys or Rapid7.
• Strong stakeholder engagement and client‑facing communication.

Exposure to IEC 62443, critical infrastructure environments or security consulting would be highly regarded.

Why consider this opportunity? You'll take technical ownership of a major enterprise security implementation, working across a diverse technology environment and helping establish a capability that gives the organisation a clearer understanding of its cyber exposure.