Why this role stands out
Leverage your expertise in cyber risk and vulnerability management to protect critical infrastructure at a leading telecommunications innovator, enjoying a hybrid work model that fosters balance. You'll thrive in this role by driving impactful threat exposure initiatives and collaborating with diverse teams to enhance organizational cyber resilience. Apply now to join a company renowned for innovation and a commitment to excellence.
Quick overview
Job description
Select how often (in days) to receive an alert:
Optus is a leading Telecommunications company that is known for delivering innovative solutions to its customers, disrupting the industry, and becoming a technology company with a diverse offering of products and services. With a strong commitment to excellence and a customer-centric approach, we're dedicated to protecting our customers, networks and critical infrastructure against an increasingly complex cyber threat landscape.
Partnering closely with the Director, Exposure Management and stakeholders across Optus, you will be responsible for:
- Leading continuous threat exposure management activities across Optus' external attack surface and internal vulnerability landscape, maintaining a threat-informed view of cyber risk.
- Continuously discovering, investigating and managing internet-facing assets, exposed services, APIs, cloud resources, certificates, shadow IT and third-party dependencies.
- Driving the end-to-end vulnerability management lifecycle including scanning, triage, validation, prioritisation, remediation tracking and verification.
- Prioritising exposures based on exploitability, business impact, attack-path reachability and threat intelligence rather than severity scores alone.
- Managing cyber exposure incidents, including zero-day vulnerabilities, mass exploitation events and software supply chain compromises, coordinating rapid assessment and remediation activities.
- Partnering with infrastructure, cloud, engineering and application teams to drive remediation to closure and improve organisational cyber resilience.
- Validating exposures through attack-path analysis, breach and attack simulation, and safe exploitation techniques to focus efforts on genuine risk.
- Collaborating with threat hunting, detection engineering and incident response teams to convert exposure findings into actionable detections and security controls.
- Driving continuous improvement across exposure management tooling, automation, reporting, metrics and operational processes.
- Extensive experience in Exposure Management, Vulnerability Management, Attack Surface Management, Offensive Security, or a related cyber security discipline.
- Strong hands-on experience managing the exposure lifecycle from discovery through remediation and risk reduction.
- Deep understanding of modern enterprise technology environments, including cloud platforms, infrastructure, applications, containers, APIs, CI/CD pipelines and identity systems.
- Experience using vulnerability management, attack surface management and exposure management platforms to assess and prioritise cyber risk.
- Proficiency with security analytics and query languages such as KQL, SPL, SQL or XQL, along with scripting skills for automation and analysis.
- Strong understanding of vulnerability exploitation, attack-path analysis, threat intelligence and MITRE ATT&CK frameworks.
- Exceptional stakeholder engagement skills, with the ability to influence remediation outcomes across teams you do not directly manage.
- Strong written and verbal communication skills, capable of translating technical findings into meaningful business risk and action plans.
- Relevant qualifications in Cyber Security, Information Technology, Computer Science or equivalent experience. Industry certifications such as OSCP, CISSP, GCIH, GWAPT or vendor certifications from Tenable, Qualys or Rapid7 will be highly regarded.
- Competitive remuneration and employee discounts. Make life easier (and more affordable) with $80 monthly credit and 25% off Optus products and unique shopping discounts with our retail partners.
- Flexible working arrangements with opportunities to work three days in the office, two days remote or home.
- Vibrant and collaborative office campus that includes cafes, convenience store, chill out zones, GP, post office, gym and on-site childcare centre.
- Competitive leave policies, including additional 'Connected' days to focus on culture, family, health, community, or whatever's important to you.
- We support growing families with inclusive, carer-neutral paid Parental Leave of up to 16 weeks.
- Direct your own development and build future-ready skills with Optus U's industry-focused micro-credentials, developed with La Trobe and Macquarie Universities.
- Build meaningful connections through employee-led networks and diversity initiatives including Culture Connect, Elevate Women, Disability Network and Express Yourself (LGBTQIA+).
- Put your wellbeing first with free access to counselling and support services, 24/7, in-person, by phone, SMS, or video.
At Optus, we are strengthened by others and that means valuing diversity and saying 'yes' to embracing individual differences. We are committed to ensuring that our application process provides an equal employment opportunity to all job seekers, including individuals from diverse gender, cultural and linguistic backgrounds, individuals with a disability, individuals identifying as being part of the LGBTQIA+ community, individuals who may have served in the armed forces or who identify as Aboriginal and/or Torres Strait Islander. We also want to do our best to make our recruitment process inclusive. If you require any adjustments or accessibility support to participate fairly and equitably in the recruitment process, please email or call . We're here to help.
Similar jobs
- TE
Senior Manager, Cyber Threat Detection & ResponseRecently posted Auto Apply
Teneo external feed for LinkedIn · Melbourne · Hybrid 🇦🇺
AWSBashCompliance+6TechnologySalary not listed - ZS

Principal AI Security SpecialistRecently posted
Zscaler · Melbourne · Hybrid 🇦🇺
Generative AIAgileAdministrativeSalary not listed - UN
Application/Product Security Engineer Graduate (Security BP) - 2027 Start (Rolling Intake)Recently posted
Unitec · Sydney · Hybrid 🇦🇺
RustC++Java+4TechnologySalary not listed - AI

Flexible Cyber Defense Specialist - IT/OT Security (Azure)Recently posted
Arc Infrastructure · Western Australia · Hybrid 🇦🇺
AzureTechnologySalary not listed - AM

Data Center Security Specialist, NTE Security (AWS)Recently posted
Amazon · Sydney · Hybrid 🇦🇺
AWSTechnologySalary not listed - ST
Cyber Security Analyst - Operational TechnologyRecently posted
Stanwell · Brisbane · Hybrid 🇦🇺
Microsoft ExcelTechnologySalary not listed - KG

Cyber GRC Analyst: AI, OT & RiskRecently posted
Kmart Group · Victoria · Hybrid 🇦🇺
TechnologySalary not listed - ST

OT Cyber Security Analyst - Energy Grid & ICS (Remote)Recently posted
Stanwell Corporation Limited · Brisbane · Remote 🇦🇺
TechnologySalary not listed - IA
Senior Cyber Security Systems AnalystRecently posted
IT Alliance · Adelaide · Hybrid 🇦🇺
IAMTechnologySalary not listed - CP
Cyber GRC Analyst - MS 365 Security & ATO (NV1)Recently posted
Compas Pty Ltd · Canberra, Australian Capital Territory · Hybrid 🇦🇺
Microsoft OfficeTechnologySalary not listed - XS
SailPoint IAM Analyst - Access Governance SpecialistRecently posted
XPT Software Australia Pty Ltd · Melbourne · On-site 🇦🇺
Stakeholder ManagementMFASSO+5Salary not listed - XS
SailPoint IAM Analyst - Access Governance SpecialistRecently posted
XPT Software Australia Pty Ltd · Brisbane · On-site 🇦🇺
Stakeholder ManagementMFASSO+5Salary not listed