Senior Vulnerability Analyst

DCCEEW NSW•Orange, FL

21h•A$133,348 - A$146,945•Hybrid

About The Position

Shape your world through work that helps build a safer and more resilient NSW. Lead vulnerability management activities that directly strengthen cyber resilience across NSW communities. This is a permanent full-time opportunity. The office location is based in Orange with flexible working supported. Salary is relative to experience, and ranges from $133,348 to $146,945+ super. Join our team and shape your world in a workplace that empowers you to do your best work and build a meaningful career. In this role, you will contribute to shaping lives and communities across NSW, while shaping your own career. You will enjoy flexible work options, varied and impactful projects, and a vibrant, diverse team culture built on collaboration, inclusion and support. We are creating a workplace where everyone belongs and where you can balance work, life and wellbeing. Cyber threats continue to evolve, and so do we. As a Senior Vulnerability Analyst, you'll help us stay one step ahead by identifying, assessing and driving the remediation of security vulnerabilities across our technology environment. Your work will help reduce risk, strengthen resilience and support the secure delivery of services that people and communities rely on every day. You'll work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions. Along the way, you'll help improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation.

Requirements

Strong technical knowledge of vulnerability discovery, assessment and remediation across operating systems, applications, databases, network devices and cloud services.
Hands-on experience using enterprise vulnerability scanning and exposure-management platforms to configure scans, validate findings and analyse results.
Ability to investigate vulnerabilities using CVE, CVSS, vendor advisories, exploit intelligence, asset context and available proof-of-concept information.
Experience identifying false positives, confirming affected software and versions, and documenting clear technical evidence for remediation teams.
Ability to analyse vulnerability data, asset inventories and threat intelligence to identify exposed systems, recurring weaknesses and remediation priorities.
Working knowledge of patching, secure configuration, compensating controls and vulnerability exception processes across complex technology environments.
Experience working with infrastructure, application, cloud and network teams to translate scan findings into actionable technical remediation steps.
Ability to produce clear technical reports, remediation guidance, dashboards and metrics that accurately communicate vulnerability status and trends.
Familiarity with scripting, APIs or data-query tools to extract, correlate and automate vulnerability-management data and workflows.
Understanding of authenticated and unauthenticated scanning, credential management, scan coverage, plugin behaviour and common causes of incomplete or inaccurate results.
Commitment to maintaining current technical knowledge of emerging vulnerabilities, exploitation techniques, security tooling and vendor remediation guidance.

Responsibilities

Lead vulnerability management activities that directly strengthen cyber resilience across NSW communities
Identify, assess and drive the remediation of security vulnerabilities across our technology environment
Reduce risk, strengthen resilience and support the secure delivery of services
Work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions
Improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation