Senior Cyber Exposure Specialist
Core
Lead continuous threat exposure management activities across Optus' external attack surface and internal vulnerability landscape, maintaining a threat-informed view of cyber risk.
Role type
Senior IC Cyber Exposure Specialist
Builds
Threat-informed view of cyber risk, prioritized exposure remediation, actionable detections and security controls
Domain
Cybersecurity, Cloud Security, Infrastructure Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Exposure Management, Vulnerability Management, Attack Surface Management, Offensive Security, Cloud platforms, Infrastructure, Containers, APIs, CI/CD pipelines, Identity systems, Security analytics, Query languages (KQL, SPL, SQL, XQL), Scripting, Vulnerability exploitation, Attack-path analysis, Threat intelligence, MITRE ATT&CK frameworks
Preferred skills
OSCP, CISSP, GCIH, GWAPT, Tenable, Qualys, Rapid7 certifications
Technologies
KQL, SPL, SQL, XQL, Tenable, Qualys, Rapid7
Responsibilities
Discover, investigate and manage internet-facing assets, exposed services, APIs, cloud resources, certificates, shadow IT and third-party dependencies; Drive end-to-end vulnerability management lifecycle including scanning, triage, validation, prioritisation, remediation tracking and verification; Prioritize exposures based on exploitability, business impact, attack-path reachability and threat intelligence; Manage cyber exposure incidents including zero-day vulnerabilities and supply chain compromises; Validate exposures through attack-path analysis, breach and attack simulation, and safe exploitation techniques; Collaborate with threat hunting, detection engineering and incident response teams to convert findings into actionable detections and controls; Drive continuous improvement across exposure management tooling, automation, reporting, metrics and operational processes
Seniority
Senior, hands-on IC
