Senior Analyst – Cyber Security Testing

About the role

AEMO’s Cyber Defence team protects critical energy systems from advanced cyber threats. As a senior member of the Cyber Testing and Vulnerability Management team, you will lead security testing across applications, infrastructure and cloud, and help raise the capability of the testing function.

Key responsibilities

• Lead scoping and delivery of security testing engagements, working with asset owners to define boundaries, objectives and requirements.
• Conduct hands‑on testing of web applications, APIs, networks, Active Directory, Azure cloud and mobile/thick‑client apps, reporting vulnerabilities with remediation guidance.
• Research and test internally adopted or developed tooling to assess security posture before and after deployment.
• Peer‑review test scopes and reports to ensure technical accuracy and consistency.
• Develop and maintain testing processes and playbooks for the team.
• Support incident response on an on‑call rotation and advise vulnerability management and risk teams.

Required profile

• One or more recognised offensive security certifications (e.g., OSCP) – OSCP desirable.
• Proven ability to lead end‑to‑end testing engagements from scoping to remediation guidance.
• Experience with vulnerability management, risk‑based prioritisation and assessing exception requests.

Required skills

• Offensive testing of web applications, APIs, network infrastructure, Active Directory, Microsoft Azure, and mobile/thick‑client applications.
• Strong understanding of adversary tradecraft and models such as MITRE ATT&CK.
• Knowledge of vulnerability management processes and risk assessment.

What we offer

• Flexible working options: work from home, part‑time, job share, hybrid.
• Professional development through projects, industry networks, job rotation and study assistance.
• Up to 4 days of volunteering leave per year.
• Annual performance bonuses (subject to eligibility).
• Wellness programme, discounted health insurance, gym perks and Employee Assistance Program.