Senior Analyst – Cyber Security Testing

About the role

AEMO’s Cyber Defence team protects critical energy systems from advanced cyber threats. As a senior analyst you will lead security testing across applications, infrastructure and cloud, and help raise the capability of the testing function.

Key responsibilities

• Lead scoping and delivery of security testing engagements, working with asset owners to define objectives and boundaries.
• Conduct hands‑on testing of web applications, APIs, networks, Active Directory paths, Azure cloud and mobile/thick‑client apps, reporting vulnerabilities with remediation guidance.
• Research‑driven testing of internally adopted and developed tooling to assess security posture before and after deployment.
• Peer‑review test scopes and reports to ensure technical accuracy and consistency.
• Develop and maintain testing processes and playbooks for the team.

Required profile

• Australian citizenship and ability to obtain a national security clearance.
• One or more recognised offensive security certifications (e.g., OSCP) – OSCP desirable.
• Proven experience leading end‑to‑end testing engagements and delivering clear remediation guidance.
• Strong understanding of adversary tradecraft and models such as MITRE ATT&CK.

Required skills

• Offensive testing of web applications, APIs, network infrastructure, Active Directory, Microsoft Azure, and mobile/thick‑client applications.
• Vulnerability management, risk‑based prioritisation and assessment of vulnerability exception requests.

What we offer

• Flexible working options: remote, part‑time, job‑share, hybrid.
• Professional development through projects, industry networks, job rotation and study assistance.
• Up to 4 days of volunteering leave per year.
• Annual performance bonuses (subject to eligibility).
• Wellness program, discounted health insurance, gym perks and Employee Assistance Program.