Senior Vulnerability Analyst

• Lead vulnerability management activities that directly strengthen cyber resilience across NSW communities
• Permanent full-time opportunity
• Office location based in Orange with flexible working supported
• Salary relative to experience, and ranges from $133,348 to $146,945+ super

Join our team and shape your world in a workplace that empowers you to do your best work and build a meaningful career. In this role, you will contribute to shaping lives and communities across NSW, while shaping your own career. You will enjoy flexible work options, varied and impactful projects, and a vibrant, diverse team culture built on collaboration, inclusion and support. We are creating a workplace where everyone belongs and where you can balance work, life and wellbeing.

Cyber threats continue to evolve, and so do we.

As a Senior Vulnerability Analyst, you'll help us stay one step ahead by identifying, assessing and driving the remediation of security vulnerabilities across our technology environment. Your work will help reduce risk, strengthen resilience and support the secure delivery of services that people and communities rely on every day.

You'll work closely with cyber security specialists, technology teams, business stakeholders and vendors to turn technical insights into practical actions. Along the way, you'll help improve how we manage vulnerabilities, strengthen security practices and build capability across the organisation.

For more information about this position, read the full Role Description: Senior Vulnerability Analyst

• →Strong technical knowledge of vulnerability discovery, assessment and remediation across operating systems, applications, databases, network devices and cloud services.
• →Hands-on experience using enterprise vulnerability scanning and exposure-management platforms to configure scans, validate findings and analyse results.
• →Ability to investigate vulnerabilities using CVE, CVSS, vendor advisories, exploit intelligence, asset context and available proof-of-concept information.
• →Experience identifying false positives, confirming affected software and versions, and documenting clear technical evidence for remediation teams.
• →Ability to analyse vulnerability data, asset inventories and threat intelligence to identify exposed systems, recurring weaknesses and remediation priorities.
• →Working knowledge of patching, secure configuration, compensating controls and vulnerability exception processes across complex technology environments.
• →Experience working with infrastructure, application, cloud and network teams to translate scan findings into actionable technical remediation steps.
• →Ability to produce clear technical reports, remediation guidance, dashboards and metrics that accurately communicate vulnerability status and trends.
• →Familiarity with scripting, APIs or data-query tools to extract, correlate and automate vulnerability-management data and workflows.
• →Understanding of authenticated and unauthenticated scanning, credential management, scan coverage, plugin behaviour and common causes of incomplete or inaccurate results.
• →Commitment to maintaining current technical knowledge of emerging vulnerabilities, exploitation techniques, security tooling and vendor remediation guidance.

At the Department of Planning, Housing and Infrastructure (DPHI), you could shape your world while helping us shape the future of NSW. Together, we create vibrant communities, places and precincts, and manage land, assets and property.

(We are a high-performing organisation that proudly reflects the communities we serve. Our diversity strengthens our cultural capability and enables us to make a meaningful difference in the lives of people across NSW. As an inclusive and accessible workplace, we value your contribution, lived experience and cultural knowledge, and we want you to feel supported, connected and empowered to succeed. With flexible work arrangements, job share options, workplace adjustments and various employee affinity groups, we are here to help you thrive every day.

If this role sounds like the right fit for you, we encourage you to apply with your CV and cover letter. We’d love to hear from you and explore how you can shape your world with us.

Applications close: 11:55pm Wednesday 21 October 2026.

Should you require further information about the role please contact Danny Howarth (Security Operations) at danny.howarth@dphi.nsw.gov.au.

A talent pool may be created for ongoing and temporary opportunities of the same role or role type that may become available over the next 18 months.

Check out our Aboriginal applicants guide to assist with applying for the role or contact our Aboriginal Career pathways team for a yarn.

We encourage and support applications from people with disability. Please reach out to us to discuss any accommodations or adjustments that may be needed during the recruitment process, ensuring that you have every opportunity to showcase your talent, skills, and potential. Contact the Talent Team via talent.acquisition@dpie.nsw.gov.au or (02) 63637676​ - HR Support, option 2, DPHI People Advisory, option 1 and reference 'Request an Adjustment - Job Title and Reference Number'.

Please note to be eligible to apply for this position you must be an Australian or New Zealand citizen or permanent resident or hold a valid Australian working Visa for the duration of the appointment. This role is subject to standard pre-employment checks, including a criminal record check.

Advertised: 08 Oct 2026 AUS Eastern Daylight Time
Applications close: 21 Oct 2026 AUS Eastern Daylight Time

Back to search results Apply now Refer a friend