Senior Vulnerability Analyst

Job Details•Orange, CA

6d•Hybrid

About The Position

As a Senior Vulnerability Analyst, you'll help us stay one step ahead by identifying, assessing and driving the remediation of security vulnerabilities across our technology environment. Your work will help reduce risk, strengthen resilience and support the secure delivery of services that people and communities rely on every day. You'll work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions. Along the way, you'll help improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation.

Requirements

Strong technical knowledge of vulnerability discovery, assessment and remediation across operating systems, applications, databases, network devices and cloud services.
Hands-on experience using enterprise vulnerability scanning and exposure-management platforms to configure scans, validate findings and analyse results.
Ability to investigate vulnerabilities using CVE, CVSS, vendor advisories, exploit intelligence, asset context and available proof-of-concept information.
Experience identifying false positives, confirming affected software and versions, and documenting clear technical evidence for remediation teams.
Ability to analyse vulnerability data, asset inventories and threat intelligence to identify exposed systems, recurring weaknesses and remediation priorities.
Working knowledge of patching, secure configuration, compensating controls and vulnerability exception processes across complex technology environments.
Experience working with infrastructure, application, cloud and network teams to translate scan findings into actionable technical remediation steps.
Ability to produce clear technical reports, remediation guidance, dashboards and metrics that accurately communicate vulnerability status and trends.
Familiarity with scripting, APIs or data-query tools to extract, correlate and automate vulnerability-management data and workflows.
Understanding of authenticated and unauthenticated scanning, credential management, scan coverage, plugin behaviour and common causes of incomplete or inaccurate results.
Commitment to maintaining current technical knowledge of emerging vulnerabilities, exploitation techniques, security tooling and vendor remediation guidance.

Responsibilities

Lead vulnerability management activities that directly strengthen cyber resilience across NSW communities.
Identify, assess and drive the remediation of security vulnerabilities across the technology environment.
Turn technical insights into practical actions by working closely with cyber security specialists, technology teams, business stakeholders and vendors.
Improve how vulnerabilities are managed, strengthen security practices and build capability across the organisation.