Senior Vulnerability Analyst

Department of Industry•Orange, CA

6d•Hybrid

About The Position

In this role, you will contribute to shaping lives and communities across NSW, while shaping your own career. You will enjoy flexible work options, varied and impactful projects, and a vibrant, diverse team culture built on collaboration, inclusion and support. We are creating a workplace where everyone belongs and where you can balance work, life and wellbeing. The role Cyber threats continue to evolve, and so do we. As a Senior Vulnerability Analyst, you'll help us stay one step ahead by identifying, assessing and driving the remediation of security vulnerabilities across our technology environment. Your work will help reduce risk, strengthen resilience and support the secure delivery of services that people and communities rely on every day. You'll work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions. Along the way, you'll help improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation.

Requirements

Strong technical knowledge of vulnerability discovery, assessment and remediation across operating systems, applications, databases, network devices and cloud services
Hands-on experience using enterprise vulnerability scanning and exposure-management platforms to configure scans, validate findings and analyse results
Ability to investigate vulnerabilities using CVE, CVSS, vendor advisories, exploit intelligence, asset context and available proof-of-concept information
Experience identifying false positives, confirming affected software and versions, and documenting clear technical evidence for remediation teams
Ability to analyse vulnerability data, asset inventories and threat intelligence to identify exposed systems, recurring weaknesses and remediation priorities
Working knowledge of patching, secure configuration, compensating controls and vulnerability exception processes across complex technology environments
Experience working with infrastructure, application, cloud and network teams to translate scan findings into actionable technical remediation steps
Ability to produce clear technical reports, remediation guidance, dashboards and metrics that accurately communicate vulnerability status and trends
Familiarity with scripting, APIs or data-query tools to extract, correlate and automate vulnerability-management data and workflows
Understanding of authenticated and unauthenticated scanning, credential management, scan coverage, plugin behaviour and common causes of incomplete or inaccurate results
Commitment to maintaining current technical knowledge of emerging vulnerabilities, exploitation techniques, security tooling and vendor remediation guidance
Australian or New Zealand citizen or permanent resident or hold a valid Australian working Visa for the duration of the appointment

Responsibilities

Lead vulnerability management activities that directly strengthen cyber resilience across NSW communities
Identify, assess and drive the remediation of security vulnerabilities across our technology environment
Reduce risk, strengthen resilience and support the secure delivery of services
Work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions
Improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation
Configure scans, validate findings and analyse results using enterprise vulnerability scanning and exposure-management platforms
Investigate vulnerabilities using CVE, CVSS, vendor advisories, exploit intelligence, asset context and available proof-of-concept information
Identify false positives, confirm affected software and versions, and document clear technical evidence for remediation teams
Analyse vulnerability data, asset inventories and threat intelligence to identify exposed systems, recurring weaknesses and remediation priorities
Translate scan findings into actionable technical remediation steps
Produce clear technical reports, remediation guidance, dashboards and metrics that accurately communicate vulnerability status and trends
Extract, correlate and automate vulnerability-management data and workflows using scripting, APIs or data-query tools
Maintain current technical knowledge of emerging vulnerabilities, exploitation techniques, security tooling and vendor remediation guidance