This is a hands-on delivery role with significant client exposure. You'll work alongside a practice lead and a senior consultant, and you will be the technical authority on the engagement.
- Design and deploy an agentless asset discovery and exposure management platform across corporate IT, cloud, OT and unmanaged device estates
- Plan and execute safe active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption
- Build and tune asset fingerprinting, classification and ownership models across a large, heterogeneous estate
- Integrate discovery data with the client's existing CMDB, vulnerability management, EDR and SIEM tooling via API
- Develop risk prioritization logic, dashboards and executive reporting mapped to NIST CSF, the Essential Eight and relevant regulatory obligations
- Identify unmanaged, unagentable and end-of-life assets, and drive remediation plans with asset owners
- Validate network segmentation integrity and map attack paths across IT/OT boundaries
- Produce operational run books and transition the capability to the client's BAU security team
- 7+ years in cyber security, including 3+ years in asset visibility, exposure management or vulnerability management delivery
- Hands-on experience with a CAASM or asset intelligence platform, e.g. Armis, Claroty xDome, Forescout, Nozomi Networks, Axonius, Sevco, JupiterOne, Lansweeper or Tenable OT Security
- Strong practical networking fundamentals: TCP/IP, routing and switching, VLANs, network segmentation, and the ability to read a packet capture
- Working knowledge of OT/industrial protocols (Modbus, DNP3, BACnet, EtherNet/IP) and the operational sensitivities of scanning production control systems
- Experience integrating security tooling via REST APIs, with scripting in Python or PowerShell for data enrichment and reporting
- Familiarity with vulnerability management platforms such as Tenable, Qualys or Rapid7, and how asset context improves their output
- Strong written and verbal communication, able to write for both engineers and executives, and hold your own in a room with a CISO
- Australian work rights; ability to obtain a Baseline or NV1 security clearance is advantageous
