Vulnerability Management Specialist — Hybrid Security

Macquarie Bank Limited; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Wellbeing leave day

Service bonus leave

Parental leave (up to 20 weeks)

Volunteer leave

Gender affirmation leave

Employee Assistance Program

Salary packaging options

Learning & development support

Hybrid/Flexible working

Work-from-home equipment reimbursement

Job summary

Macquarie Bank Limited is seeking a Vulnerability Management Specialist to join its Cyber Security Team. You will bridge raw vulnerability data and actionable risk decisions, triaging CVEs across diverse ecosystems and advising on real-world exploitability within enterprise defenses and compensating controls.

You will also lead in dependency management across Java, npm, Go, and Python, and work with Kubernetes/containerization, CI/CD security, and GitHub Enterprise tools to embed security into

Qualifications

• Demonstrated experience in vulnerability management, application security, or product security, with hands-on CVE triage across multiple ecosystems.
• Strong working knowledge of application dependency management across Java, npm, Go, and Python, including how vulnerabilities propagate through transitive dependencies.
• Solid understanding of software frameworks, Kubernetes, and containerization (image layering, registries, runtime security).
• Practical experience with CI/CD pipelines and embedding security controls within them.

Responsibilities

• Triage vulnerabilities across the technology estate and provide defensible, risk-based guidance to engineering and product teams.

Skills

Vulnerability management

CVE triage

Dependency management

Kubernetes

Container security

CI/CD security

GitHub Enterprise

GHAS

CodeQL

Secret scanning

Communication skills

Tools

GitHub Enterprise

GHAS

CodeQL

Job description

Macquarie Bank Limited is seeking a Vulnerability Management Specialist to join its Cyber Security Team. You will bridge raw vulnerability data and actionable risk decisions, triaging CVEs across diverse ecosystems and advising on real-world exploitability within enterprise defenses and compensating controls.

You will also lead in dependency management across Java, npm, Go, and Python, and work with Kubernetes/containerization, CI/CD security, and GitHub Enterprise tools to embed security into