Senior Cyber Exposure Specialist
Core
Lead continuous threat exposure management activities across Optus' external attack surface and internal vulnerability landscape, maintaining a threat-informed view of cyber risk.
Role type
Senior IC cyber exposure specialist
Builds
Threat-informed exposure management programs and actionable detections
Domain
Cybersecurity / Cloud Security
Required skills
Exposure management, Vulnerability management, Attack surface management, Offensive security, Cloud platforms, Security analytics (KQL/SPL/SQL/XQL), Scripting, Attack-path analysis, Threat intelligence, MITRE ATT&CK
Preferred skills
OSCP, CISSP, GCIH, GWAPT, Tenable, Qualys, Rapid7 certifications
Technologies
Cloud platforms, Containers, APIs, CI/CD pipelines, Identity systems, Vulnerability management platforms, Attack surface management platforms
Responsibilities
Discover, investigate, and manage internet-facing assets, exposed services, APIs, cloud resources, certificates, shadow IT, and third-party dependencies; Drive end-to-end vulnerability management lifecycle including scanning, triage, validation, prioritization, remediation tracking, and verification; Prioritize exposures based on exploitability, business impact, attack-path reachability, and threat intelligence; Manage cyber exposure incidents including zero-day vulnerabilities and supply chain compromises; Validate exposures through attack-path analysis, breach and attack simulation, and safe exploitation techniques; Collaborate with threat hunting, detection engineering, and incident response teams to convert findings into actionable detections and security controls; Drive continuous improvement across exposure management tooling, automation, reporting, metrics, and operational processes.
Seniority
Senior, hands-on IC
