Senior Platform Engineer
Commonwealth Bank of Australia2 months ago
Bengaluru, IndiaSenior
Responsibilities
- Discover, monitor, and analyze internet-facing assets and exposures using Assetnote or similar attack surface management platforms.
- Investigate security findings to assess validity, exploitability, reachability, severity, and potential business impact.
- Analyze externally observable risks across domains, applications, services, network infrastructure, and cloud-hosted assets.
- Prioritize meaningful security findings, distinguish them from false positives or low-value findings, and recommend appropriate actions.
- Maintain accurate asset visibility, ownership information, and external attack-surface data.
- Communicate security findings and recommended actions to engineering and technology teams and support findings through closure.
- Identify recurring exposure patterns and control gaps and provide insights to improve perimeter security posture.
- Contribute to improvements in security monitoring, reporting, platform configuration, and analytical workflows.
Requirements
- Demonstrated experience investigating security exposures, vulnerabilities, or externally observable risks and forming defensible security conclusions from technical evidence.
- Hands-on experience with external attack surface management, exposure management, vulnerability management, or comparable security capabilities.
- Experience using Assetnote or similar vulnerability or exposure-management platforms.
- Strong understanding of internet-facing assets, services, ports, protocols, domains, subdomains, certificates, and externally exposed applications.
- Ability to assess credible security risk using exploitability, reachability, severity, and available context.
- Ability to correlate multiple data sources and infer potential security risks when findings are incomplete.
- Understanding of common web, infrastructure, network, and cloud security vulnerabilities and misconfigurations.
- Working knowledge of security concepts and common exposure patterns across AWS, Azure, and GCP.
- Ability to clearly explain technical security findings, supporting evidence, and recommended actions to engineering and technology teams.
- Beneficial experience with Python, Bash, PowerShell, AWS, Azure, GCP, Terraform, CloudFormation, GitHub, GitHub Actions, Linux, Windows, logs, dashboards, monitoring, alerting, APIs, and automated security workflows.
- Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.