Senior Cyber Exposure Specialist
Core
Lead continuous threat exposure management activities across Optus' external attack surface and internal vulnerability landscape, maintaining a threat-informed view of cyber risk.
Role type
Senior IC Cyber Exposure Specialist
Builds
Threat-informed view of cyber risk, prioritized exposure remediation, actionable detections and security controls
Domain
Cybersecurity, Cloud Security, Infrastructure Security
Required skills
Exposure Management, Vulnerability Management, Attack Surface Management, Offensive Security, Cloud platforms, Infrastructure, Containers, APIs, CI/CD pipelines, Identity systems, Security analytics, Query languages (KQL, SPL, SQL, XQL), Scripting, Vulnerability exploitation, Attack-path analysis, Threat intelligence, MITRE ATT&CK frameworks
Preferred skills
OSCP, CISSP, GCIH, GWAPT, Tenable, Qualys, Rapid7 certifications
Technologies
KQL, SPL, SQL, XQL, Tenable, Qualys, Rapid7
Responsibilities
Discover, investigate and manage internet-facing assets, exposed services, APIs, cloud resources, certificates, shadow IT and third-party dependencies; Drive end-to-end vulnerability management lifecycle including scanning, triage, validation, prioritisation, remediation tracking and verification; Prioritize exposures based on exploitability, business impact, attack-path reachability and threat intelligence; Manage cyber exposure incidents including zero-day vulnerabilities and supply chain compromises; Validate exposures through attack-path analysis, breach and attack simulation, and safe exploitation techniques; Collaborate with threat hunting, detection engineering and incident response teams to convert findings into actionable detections and controls; Drive continuous improvement across exposure management tooling, automation, reporting, metrics and operational processes
Seniority
Senior, hands-on IC
