Cyber Security Vulnerability Assessor

C4i Solutions is a leading Technology, ICT, and Digital Solutions company, delivering real outcomes for our Defence, Government, and Industry partners. We're growing and we're looking for great people who share our values, believe in our mission, and care about what they do. People who value teamwork, take pride in their work, and want to make an impact.

About the Role:

As a Cyber Security Vulnerability Assessor in C4i Solutions, you will be responsible for implementing, configuring, and maintaining the technical security controls that protect the system throughout its lifecycle. This role translates security requirements and risk treatments into actionable configurations across operating systems, applications, networks, and cloud services. This involves coordinating remediation of vulnerabilities by liaising with system IT and engineering teams to implement secure baseline hardening, endpoint protection and perform vulnerability reporting and trend analysis. The role is located onsite in Sydney, CBD.

• Conduct vulnerability assessments across infrastructure, networks, and applications.
• Perform regular vulnerability scanning using industry tools (e.g. Nessus, Qualys, Rapid7).
• Analyse scan results to identify and prioritise security risks.
• Validate vulnerabilities and assess potential business impact.
• Produce detailed vulnerability reports with remediation recommendations.
• Work with engineering and operations teams to track and remediate findings.
• Support patch management and vulnerability remediation processes.
• Conduct authenticated and unauthenticated scans across environments.
• Maintain vulnerability registers and track risk status over time.
• Perform basic penetration testing or support red team activities (where required).
• Ensure compliance with organisational security policies and frameworks.
• Stay current with emerging threats, CVEs, and vulnerability trends.

• Australian citizen (required for Defence projects) with a min AGSVA NV1 clearance.
• Bachelor's degree in Cyber Security, Information Technology, or related field (or equivalent experience).
• Relevant certifications such as Certified Ethical Hacker (CEH), CompTIA Security+, or Offensive Security Certified Professional (OSCP).
• Hands-on experience with vulnerability management tools.
• Strong understanding of common vulnerabilities (e.g. OWASP Top 10).
• Knowledge of operating systems, networking, and system hardening practices.
• Familiarity with security frameworks (e.g. NIST Cybersecurity Framework, ISO/IEC 27001, Australian Government ISM).
• Understanding of CVSS scoring and risk prioritisation.
• Experience with scripting or automation (Python, PowerShell, Bash).
• Strong analytical and reporting skills.
• Excellent communication and stakeholder engagement skills Ability to work in high-pressure, secure ICT environments.

If you're looking for a workplace where your skills, experience, and dedication are genuinely valued we'd love to hear from you. We are a close-knit team of veterans, problem-solvers, tech heads, dads, mums, soccer coaches, and weekend adventurers who love what we do, like to have a bit of fun, and don't take ourselves too seriously. What brings us together is a passion for doing great work that makes a real difference to those who serve.

If this sounds like your kind of team, apply now. We'd love to hear from you.

www.C4isolutions.com.au