Job Type: Full-time

Cyber Security Engineer – Vulnerability ManagementThis is a permanent opportunity for a well-rounded Cyber Security Engineer who has strong Vulnerability Management experience but does not want to be confined to a purely VM-focused role.Vulnerability Management will be the core responsibility, but you will join a small, multidisciplinary Information Security team where you will also contribute across cloud security, security tooling, penetration testing, remediation activity and broader cyber security initiatives as priorities shift.This is a permanent opportunity for a well-rounded Cyber Security Engineer who has strong Vulnerability Management experience but does not want to be confined to a purely VM-focused role.Vulnerability Management will be the core responsibility, but you will join a small, multidisciplinary Information Security team where you will also contribute across cloud security, security tooling, penetration testing, remediation activity and broader cyber security initiatives as priorities shift.The opportunityYou will take ownership of Vulnerability Management end to end — understanding findings, assessing genuine risk, prioritising what matters, identifying the right technical owners and driving remediation through to closure.The emphasis is not on simply producing scanner reports or passing findings to other teams. You will need enough technical depth to understand the likely impact of a vulnerability, possible remediation or workaround options, and which team needs to act.The environment is 100% cloud, with Qualys as the primary Vulnerability Management platform alongside several other security tools.This is also a role where you will not be siloed. The security team is small,



so when priorities change you will have the opportunity to contribute to broader Information Security work and projects.Why this role stands outBrand-new permanent headcount with genuine ownershipSmall Information Security team with broad exposure across cyber100% cloud environmentQualys plus multiple security platformsExposure to penetration testing and remediation of findingsOpportunity to work beyond pure VM governance and reportingScope to contribute to wider security projects and capability upliftWhat you’ll be doingOwn the Vulnerability Management lifecycle from identification through to remediation and closureAnalyse and prioritise vulnerabilities based on exploitability, exposure, asset criticality and business impactWork closely with Infrastructure, Cloud, Application and Security teams to drive remediationManage and optimise Qualys and other security toolingCoordinate penetration testing activity and remediation of findingsMaintain vulnerability SLAs, exceptions, risk acceptance and escalation processesImprove reporting, workflow automation and remediation visibilityContribute to cloud security, security tooling and broader cyber initiativesSupport wider Information Security activity where team priorities require itWhat you’ll bringYou do not need to have spent your entire career in Vulnerability Management. In fact,



this role will particularly suit someone with a broader Cyber Security Engineering or Security Operations background who has meaningful VM experience within that broader remit.You will ideally bring:5+ years across Cyber Security / Information SecurityStrong hands-on Vulnerability Management experienceExperience with Qualys, Tenable, Rapid7, Wiz or similar platformsGood technical understanding across cloud, infrastructure and applicationsExperience driving remediation with technical teamsStrong risk-based prioritisation and vulnerability analysis skillsExposure to penetration testing and remediation trackingBroader experience across areas such as cloud security, security operations, endpoint security, SIEM/EDR, DevSecOps, application security or security engineeringStrong stakeholder communication skillsAbility to work effectively in a small team where responsibilities extend beyond a single security disciplineExperience within financial services or another regulated environment would be advantageous, as would exposure to frameworks such as ISO 27001 or NIST.Who this will suitThis could suit someone currently working as a:Cyber Security EngineerSenior Cyber Security AnalystSecurity Operations EngineerSecurity EngineerVulnerability Management Specialist with broader security experienceIt is less likely to suit someone whose recent experience has been exclusively focused on Vulnerability Management reporting/governance, or someone operating at Head of Cyber / senior architecture level.If you enjoy Vulnerability Management but want a role where you can also broaden your exposure across Cyber Security, this is a robust prospect to take greater ownership while remaining hands-on.To discuss the role confidentially, contact Amanda Evans at The Recruitment Company.Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad . #J-18808-Ljbffr

📌 Cloud Security Engineer - End-to-End Vulnerability Management (North Sydney)
🏢 TRC Group
📍 North Sydney