Senior Vulnerability Analyst

Hamilton Barnes; Sydney; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Laptop provided

Mobile phone provided

Job summary

Hamilton Barnes in Sydney seeks a Senior Vulnerability Analyst to own vulnerability assessment, triage and remediation across customer environments. You will translate findings into meaningful risk reduction and advise customers on what needs to be fixed and why.

Working with the Cyber Security Manager, you’ll manage remediation across multiple environments, improve processes and deliver clear risk summaries. This role is hybrid, permanent, full-time in Sydney with a laptop and mobile provided.

Qualifications

• 3 to 4+ years of relevant cybersecurity experience.
• Hands-on vulnerability management experience.
• Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7.
• Experience in an MSP, MSSP or managed security services environment.
• Confidence communicating technical findings and security risks to customers.

Responsibilities

• Manage vulnerability assessment and scanning across customer environments.
• Analyse and triage vulnerability findings, validating severity and business impact.
• Prioritise vulnerabilities based on risk, asset criticality, threat intelligence and exposure.
• Explain findings and remediation priorities to customers.
• Coordinate with infrastructure, networking and security teams to drive remediation through to closure.
• Monitor outstanding vulnerabilities, remediation deadlines and recurring issues.
• Produce clear vulnerability reports, dashboards and risk summaries for customers and internal stakeholders.
• Identify recurring weaknesses and opportunities to improve security posture.
• Improve vulnerability management processes and reporting standards.

Skills

Vulnerability management

Risk assessment

Customer communication

Reporting & documentation

Security frameworks

Tools

Tenable

Qualys

Rapid7

Job description

Sydney, NSW | Hybrid Working | Permanent, Full Time

Are you a cybersecurity professional who knows how to turn vulnerability findings into meaningful risk reduction?

Our client is a specialist technology business delivering solutions across networking, cyber security, operational technology (OT) and smart buildings. They help organisations connect, secure and optimise the technology underpinning their commercial, retail, residential and industrial environments.

As their cybersecurity capability continues to grow, they're looking for a Senior Vulnerability Analyst to take ownership of vulnerability assessment, triage and remediation across customer environments.

This isn't a role where you simply run scans and send reports. We're looking for someone who understands what the findings mean, can distinguish genuine risk from noise, and has the confidence to advise customers on what needs to be fixed and why.

About the Opportunity

You'll play a key role in delivering vulnerability management services across a range of customer environments. Working closely with the Cyber Security Manager, you'll help customers understand their security posture, prioritise vulnerabilities and improve their overall resilience.

You'll need strong technical judgement, excellent communication skills and the ability to manage multiple customer environments in a structured, service focused environment.

What You'll Be Doing

• Manage vulnerability assessment and scanning activities across customer environments.
• Analyse and triage vulnerability findings, validating severity, exploitability and business impact.
• Prioritise vulnerabilities based on risk, asset criticality, threat intelligence and exposure.
• Work directly with customers to explain findings, communicate risk and agree remediation priorities.
• Coordinate with infrastructure, networking and security teams to drive remediation through to closure.
• Monitor outstanding vulnerabilities, remediation deadlines, exceptions and recurring issues.
• Produce clear vulnerability reports, dashboards and risk summaries for customers and internal stakeholders.
• Identify recurring weaknesses, configuration issues and opportunities to improve security posture.
• Improve vulnerability management processes, reporting standards and service delivery.
• Contribute technical expertise and guidance to the wider cybersecurity function.

What We’re Looking For

We're interested in someone with a strong background in vulnerability management who combines technical capability with customer facing experience.

You’ll ideally bring:

• 3 to 4+ years of relevant cybersecurity experience, with demonstrable hands on vulnerability management experience.
• Practical experience with vulnerability management platforms such as Tenable, Qualys or Rapid7.
• Strong vulnerability triage skills, including risk based prioritisation and validation of findings.
• Experience coordinating remediation activities and tracking vulnerabilities through to verified closure.
• Previous experience in an MSP, MSSP or managed security services environment.
• Confidence communicating technical findings and security risks to customers with varying levels of technical knowledge.
• Strong reporting, documentation and stakeholder management skills.
• An understanding of security frameworks such as ISO 27001, NIST and the Australian Essential Eight.

What Will Set You Apart

• Experience managing vulnerability management services across multiple customers.
• The ability to distinguish theoretical severity from genuine business risk.
• Experience working with infrastructure, networking, cloud and endpoint environments.
• Familiarity with scripting, automation or integrations that improve vulnerability management workflows.
• Exposure to incident response, threat intelligence or security operations.

Why Join?

This is an opportunity to join a growing cybersecurity function within a business operating at the intersection of networking, cyber security, OT and smart building technology.

You’ll have the opportunity to:

• Take ownership of vulnerability management delivery and influence how services evolve.
• Work directly with customers rather than being confined to an internal security function.
• Collaborate with experienced security professionals and technical teams.
• Expand your expertise into incident response, threat intelligence and managed SOC operations as the business grows.
• Develop your career in a role combining hands on technical work, customer engagement and security advisory responsibilities.

Location and Working Arrangements

• Sydney based.
• Minimum three days per week in the office, increasing to five days per week during probation.
• Permanent, full time position.
• Laptop and mobile phone provided.

Interested?

If you’re a vulnerability management specialist who enjoys solving technical problems, advising customers and driving remediation rather than simply producing scan reports, we’d like to hear from you.