Job Description

We are seeking a Security Analyst for an initial short-term contract engagement running from October through December 2026 with possible extensions in Sydney.

In this specialist technical role, you will be responsible for analyzing raw discovery data across our internet-facing infrastructure to build a validated, risk-actionable External Exposure Baseline. You will bridge technical discovery with risk governance—consolidating complex datasets, establishing asset ownership, prioritizing vulnerabilities, and embedding findings into our ongoing Exposure Management function.

Key Responsibilities

- Attack Surface Data Analysis: Analyze large-scale external exposure datasets (IP addresses, domains, subdomains, VPN assets, cloud services, and edge infrastructure) to establish an authoritative external attack surface baseline.

- Asset Discovery & Normalization: Consolidate, normalize, and de-duplicate asset discovery data from multiple internal and external discovery engines into a single source of truth.

- Inventory Reconciliation & Ownership Mapping:



Reconcile discovered external assets against internal registers to identify ownership gaps, rogue non-production environments, and unmanaged services.

- Stakeholder Engagement: Collaborate across application, infrastructure, and business teams to validate technical relationships, business criticality, and operational status.

- Risk Assessment & Prioritization: Evaluate findings to identify systemic control gaps, orphaned assets, and security risks—prioritizing remediation based on threat posture, business impact, and effort.

- Treatment & Remediation Planning: Define clear treatment recommendations, including remediation actions, ownership assignment, risk acceptance, or asset decommissioning.

- Documentation & Governance: Maintain audit-ready records of findings, decision rationale, ownership records, and evidence to support handover to ongoing operational teams.

- Executive Reporting: Deliver explicit reporting and insights on exposure trends, remediation progress, and systemic control issues for senior cybersecurity leadership.

📌 Security Analyst - Contract (Sydney)
🏢 NCS Australia
📍 Sydney