Senior Consultant, Threat Adversary Mitigation

Region: VIC- Melbourne CBD

In this role you’ll design and build advanced measures and countermeasures to mitigate the threats we are faced with today and the ones we will face tomorrow. It’s a role for people who love researching adversaries, building solutions and making red teams cry.

• We are obsessed about our customers and stakeholders as much as we are about foosball.
• You’ll Join a team that is laser focused on taking things to the next level, with complete executive sponsorship and a mature vision.
• More than a career - work flexible hours, partly remote, with close mentorship and travel/conference/training allocations.

• Actively lead and drive the development and implementation of the threat and countermeasures framework, including Intelligence led Attack Procedures, Theoretical and Threat Attack Scenarios, ATT&CK TTP Mapping, Mitigations and Controls to drive significant improvement of NAB’s cyber defenses through the analysis, production and embedment of Defensive Requirements.
• Take ownership and provide SME support for remediation and mitigation strategies for tracked adversaries and tradecraft.
• Influence and drive key stakeholder Including senior management, Strategy and Architecture, support teams, third parties and vendors to ensure a defensible architecture.
• Produce reporting on countermeasure effectiveness, ineffectiveness and ROI commensurate with NAB’s Threats.
• Establish and lead attack simulation capability and mitigation metrics, to drive significant improvement of NAB’s cyber defences.
• Perform deep dive investigations into potential high-risk exposure areas.
• Lead periodic review of countermeasures and threat scenarios, including detailed configuration of security controls to ensure optimal defensive posture.
• Proactively identify improvements in countermeasures to prevent and be able to respond to successful attacks.
• Partner with Threat & Vulnerability Intelligence, Red Team, Cyber Detection and Response and other operational teams to automate adversary simulation and test countermeasure effectiveness.
• Engage and influence across enterprise at executive level to advance NAB’s Cyber Posture
• Establish strong external relationships and network with peer organizations across public and private sector.
• Lead day-to-day activities for threat adversary mitigation team.
• Operationalise the threat lead Risk framework as it pertains to adversary mitigation analysis activities.
• Produce clear and accurate reporting for stakeholders.
• Assist with incident response where required by leadership.

• Likely an appropriate tertiary or industry qualifications in cyber security or a ton of skill, we’re not fussed.
• A unique combination of engineering acumen plus a combination of CTI, Offensive Security and a Cyber Defence mindset.
• Experience in CTI/SOC in large complex enterprise environments is an advantage.
• Familiarity with common security and threat frameworks, taxonomies and ontologies such as NIST CSF, NIST SPs, MITRE ATT&CK, STIX, VERIS, MITRE DEFEND, MITRE ENGAGE etc..
• Excellent communication, stakeholder management and influencing skills.
• Disciple of a data driven, threat led, Risk averse approach to Cyber Security
• A Battle-Tested seasoned cyber security professional
• Executive relationship management and an Influential communicator / storyteller
• Able to Coach, Mentor, Inspire and Develop teams.
• Possesses a curiosity driven security research mindset.
• Designing / Architecting enterprise-grade security solutions

A diverse and inclusive workplace works better for everyone

We are committed to providing an environment where you can work your way.

For details on the recruitment process, and accessibility, please visit www.nab.com.au/about-us/careers/apply-for-job. To discuss adjustment requirements, please contact the NAB Careers team, via nab.careers@nab.com.au (please reference job number) or visit our Careers page through the link above for other contact options.

Join NAB

If you think this role is the right fit for you, we would love to hear from you. Please note candidate screening and interviews may be conducted prior to the closing date of the job advert. Unsolicited CVs from agencies will not be accepted.