Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm) at NCS Australia | AU | Rezi

Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm) at NCS Australia

Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm)

NCS Australia · AU

3 days ago

Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm)

NCS Australia · AU

3 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm) role.

Rezi rewrites your resume against NCS Australia's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Consultant - Exposure Management & Asset Visibility (Contract or Perm) posting at NCS Australia — free, in seconds.

About the Role

Deliver an enterprise exposure management and asset visibility capability for a major Australian client, transforming raw asset data into actionable risk insights for security leadership. This hands-on role requires technical leadership in design, deployment, and operational handover.

Responsibilities

  • Design and deploy an agentless asset discovery and exposure management platform across corporate IT, cloud, OT, and unmanaged device estates.
  • Plan and execute safe active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption.
  • Build and tune asset fingerprinting, classification, and ownership models across a large, heterogeneous estate.
  • Integrate discovery data with the client’s existing CMDB, vulnerability management, EDR, and SIEM tooling via API.
  • Develop risk prioritisation logic, dashboards, and executive reporting that map findings to NIST CSF, the Essential Eight, and the client’s regulatory obligations.
  • Identify unmanaged, unagentable, and end-of-life assets, and drive remediation plans with asset owners.
  • Validate network segmentation integrity and map attack paths across IT and OT boundaries.
  • Produce operational runbooks and transition the capability to the client’s BAU security team.

Requirements

  • Seven or more years in cyber security, with at least three in asset visibility, exposure management, or vulnerability management delivery.
  • Hands-on experience with one or more CAASM or asset intelligence platforms (e.g., Armis, Claroty xDome, Forescout, Nozomi Networks, Axonius, Sevco, JupiterOne, Lansweeper, or Tenable OT Security).
  • Strong practical networking skills: TCP/IP, routing and switching, VLANs, network segmentation, and the ability to read a packet capture.
  • Working knowledge of OT and industrial protocols (Modbus, DNP3, BACnet, EtherNet/IP) and the operational sensitivities of scanning production control systems.
  • Experience integrating security tooling via REST APIs.
  • Scripting in Python or PowerShell for data enrichment and reporting.
  • Familiarity with vulnerability management platforms (e.g., Tenable, Qualys, Rapid7) and how asset context improves their output.
  • Ability to write clearly for both engineers and executives.
  • Ability to hold your own in a room with a CISO.
  • Valid Australian work rights.
  • Ability to obtain a Baseline or NV1 clearance is advantageous.
  • Exposure to Purdue model architectures and IEC 62443 is a plus.
  • Prior consulting or systems integrator delivery experience is a plus.
  • Certifications such as GICSP, GRID, CISSP, OSCP, or vendor-specific asset platform accreditations are a plus.
  • Experience in regulated industries (utilities, telecommunications, financial services, or critical infrastructure under the SOCI Act) is a plus.
  • Applicants may be required to undergo relevant background, probity, and police checks.

Skills

  • Asset visibility
  • Exposure management
  • Vulnerability management
  • CAASM platforms
  • Asset intelligence platforms
  • Networking (TCP/IP, routing, switching, VLANs, network segmentation)
  • Packet capture analysis
  • OT and industrial protocols (Modbus, DNP3, BACnet, EtherNet/IP)
  • API integration (REST)
  • Python scripting
  • PowerShell scripting
  • Vulnerability management platforms
  • Technical design
  • Deployment
  • Operational handover
  • Risk assessment
  • Reporting
  • Communication (written and verbal)

Location

  • Australia

Work Type

  • Full-time

Experience Level

  • Senior

About the Company

  • NCS Australia believes in doing technology services better, with a commitment to quality, focus on people, and a willingness to challenge traditional thinking.
  • The company is committed to creating an environment that prioritizes innovation, collaboration, and purposeful work.
  • NCS values Adventure, Excellence, Integrity, Ownership, and Unity, bringing curiosity, collaboration, and accountability to their work.

Equal Opportunity

  • We celebrate diversity and inclusion.
  • We value different perspectives, experiences, and strengths our people bring.
  • We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow, and succeed.
  • We provide equal employment opportunities and reasonable adjustments throughout the recruitment process.