Senior Vulnerability Management Specialist (Tenable)

About the Company

Responsibilities

• ● At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together. We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.
• ● Strong demonstrable experience in cyber security or infrastructure operations, with at least 4 years hands-on in vulnerability management Proven operational experience running Tenable in a large, complex organisation (tens of thousands of assets): Tenable One Vulnerability Management (formerly Tenable.io) and/or Tenable Security Center (formerly Tenable.sc). You have operated the platform day to day, not just consumed its reports Deep working knowledge of Nessus scanners and agents, credentialed scanning, scan policy tuning, asset tagging, VPR, dashboards, and recast and accept rules Exposure to the wider Tenable One platform, such as web application scanning, cloud, identity or attack surface management A track record of driving remediation at scale across multiple technology teams, with measurable reduction in ageing and critical exposure Strong grounding in Windows, Linux, networking and cloud (AWS or Azure), enough to discuss root cause and fixes credibly with engineers Experience integrating vulnerability data with ITSM and CMDB platforms such as ServiceNow, and scripting in Python or PowerShell against APIs Working knowledge of the Essential Eight patching requirements and how to evidence compliance Clear written and verbal communication, with the confidence to brief a CISO and to hold a service owner to a deadline Full Australian work rights, and availability to work on site in Sydney Nice to have: Experience with ServiceNow Vulnerability Response or similar remediation workflow tooling Experience with other vulnerability management platforms such as Qualys, Rapid7 or Microsoft Defender Vulnerability Management Prior consulting, systems integrator or managed services delivery experience Experience in regulated industries such as telco, financial services, government or critical infrastructure Tenable product certification, or CISSP, CISM, GIAC or equivalent
• ● Why NCS This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other. Ready to make extraordinary happen We'd love to hear from you. We celebrate diversity and inclusion We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process. Important information Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks. Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.