About the Company
Our client is one of Australia's largest general insurers.
This position sits within Cyber Operations for Group Technology; this is a hands-on lead role for an experienced security engineer who wants to own and mature an enterprise vulnerability management program.
You'll be the subject matter expert on the organisation's Palo Alto Cortex Vulnerability Management platform, driving detection, prioritisation and remediation across hybrid and cloud environments.
Key Responsibilities
Administer and maintain the vulnerability management platform, ensuring scan coverage, asset visibility and data accuracy across the attack surface
Build remediation workflows that automate ticketing, SLA tracking and owner assignment, integrated with ITSM platforms
Define and manage scanning schedules, credentialed scan policies and asset group configurations across on-prem, cloud and hybrid environments
Triage and prioritise vulnerabilities using risk-based scoring, incorporating threat intelligence, asset criticality and exploitability context
Engage product owners and asset custodians to drive timely remediation, tracking SLAs and escalating aged or critical findings through governance channels
Develop and maintain reporting — executive dashboards, operational metrics and trend analysis — tailored to different audiences
Define and maintain vulnerability management policy, standards and exception handling processes aligned to organisational risk appetite and compliance frameworks
Mentor and upskill other engineers through documentation, training and informal support
Coordinate the threat intelligence program, enriching vulnerability data with known exploitation activity, adversary TTPs and emerging advisories
Develop SOPs,



support documentation and automation scripts to ensure consistent, high-quality operations
Support penetration testing and red team activities with vulnerability context and remediation status
Evaluate and implement improvements to scan architecture, including authenticated scanning, agent-based deployment, and API integrations with CMDB, ITSM and SOAR platforms
About You
Hands-on experience with security platforms such as Palo Alto Cortex Vulnerability Management, ideally within a regulated financial services environment
Strong understanding of vulnerability management practices — CVSS, remediation workflows, risk prioritisation, and governance reporting
Solid experience with Microsoft Entra and/or Active Directory
Automation skills in PowerShell, Python or similar for API integration and task automation
Experience incorporating threat intelligence into vulnerability management processes
Proven track record running business-critical security technology 24×7, including change, incident and problem management (ITIL or similar)
Ability to read and produce design documents, sequence diagrams, and conduct structured testing
Knowledge of APRA CPS 234, PCI-DSS or equivalent compliance frameworks highly regarded
You'll also bring:
A solid passion for cybersecurity operations and design thinking
The ability to adapt quickly to changing priorities and evolving requirements
Excellent communication skills and the ability to build rapport across technical and non-technical stakeholders
Critical thinking and the confidence to constructively challenge ideas
A pragmatic, business-minded and results-oriented approach
A collaborative, can-do attitude with the initiative to help the team deliver
Comfort working independently and within dispersed/distributed teams
#J-*****-Ljbffr

📌 Senior Cyber Security Engineer (New South Wales)
🏢 Lanson Partners
📍 New South Wales