Senior Threat-Informed Vulnerability Lead

Peoplebank; Sydney; On-site; AUD 126,000 - 154,000; Full time

Job summary

Peoplebank seeks multiple Senior Cyber Vulnerability Management Specialists to join its Cyber Security team. You will identify and reduce cyber risk across enterprise environments, coordinating with engineering, cloud, and security teams to remediate exposures and stay ahead of threats.

Responsibilities include continuously identifying exposures, validating findings, and leading remediation efforts with asset owners, while prioritising risks using threat intelligence and exploitability.

Qualifications

• Strong hands-on experience in exposure management, vulnerability management, attack surface management, or offensive security within a large enterprise environment.
• Ability to prioritise security risks based on exploitability, business context, threat intelligence, and operational impact.

Responsibilities

• Continuously identify, assess, and prioritise cyber exposures across enterprise technology environments.
• Maintain visibility of attack surface through discovery, validation, and investigation of assets.
• Drive vulnerability and exposure management from assessment through remediation with asset owners and engineering teams.
• Prioritise remediation using threat intelligence, exploitability, business impact, and asset criticality.
• Lead responses to significant exposure events and emerging threats.
• Validate high-risk findings and assess the effectiveness of security controls.

Skills

Exposure management

Vulnerability management

Attack surface management

Threat intelligence

Stakeholder communication

Tools

Tenable

Qualys

Rapid7

runZero

Job description

Peoplebank seeks multiple Senior Cyber Vulnerability Management Specialists to join its Cyber Security team. You will identify and reduce cyber risk across enterprise environments, coordinating with engineering, cloud, and security teams to remediate exposures and stay ahead of threats.

Responsibilities include continuously identifying exposures, validating findings, and leading remediation efforts with asset owners, while prioritising risks using threat intelligence and exploitability.