Senior Platform Engineer
Commonwealth Bank of Australia2 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Discover, monitor, and analyze internet-facing assets and exposures using Assetnote or similar attack surface management platforms.
- Investigate security findings to assess validity, exploitability, reachability, severity, and potential business impact.
- Analyze externally observable risks across domains, applications, services, network infrastructure, and cloud-hosted assets.
- Prioritize meaningful security findings, distinguish them from false positives or low-value findings, and recommend appropriate actions.
- Maintain accurate asset visibility, ownership information, and external attack-surface data.
- Communicate security findings and recommended actions to engineering and technology teams and support findings through closure.
- Identify recurring exposure patterns and control gaps and provide insights to improve perimeter security posture.
- Contribute to improvements in security monitoring, reporting, platform configuration, and analytical workflows.
Requirements
- Demonstrated experience investigating security exposures, vulnerabilities, or externally observable risks and forming defensible security conclusions from technical evidence.
- Hands-on experience with external attack surface management, exposure management, vulnerability management, or comparable security capabilities.
- Experience using Assetnote or similar vulnerability or exposure-management platforms.
- Strong understanding of internet-facing assets, services, ports, protocols, domains, subdomains, certificates, and externally exposed applications.
- Ability to assess credible security risk using exploitability, reachability, severity, and available context.
- Ability to correlate multiple data sources and infer potential security risks when findings are incomplete.
- Understanding of common web, infrastructure, network, and cloud security vulnerabilities and misconfigurations.
- Working knowledge of security concepts and common exposure patterns across AWS, Azure, and GCP.
- Ability to clearly explain technical security findings, supporting evidence, and recommended actions to engineering and technology teams.
- Beneficial experience with Python, Bash, PowerShell, AWS, Azure, GCP, Terraform, CloudFormation, GitHub, GitHub Actions, Linux, Windows, logs, dashboards, monitoring, alerting, APIs, and automated security workflows.
- Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
About Commonwealth Bank of Australia
Australia’s leading provider of financial services including retail, premium, business and institutional banking, funds management, superannuation, insurance, investment and sharebroking products and services. We are a business with more than 800,000 shareholders and over 52,000 employees. We offer a full range of financial services to help all Australians build and manage their finances. Connect with us, we'd like to hear from you: facebook.com/commonwealthbank twitter.com/commbank youtube.com/commbank youtube.com/commbankbusiness instagram.com/commbank Our Community Guidelines can be found at: https://www.commbank.com.au/support/social-networks.html For information on our Privacy Policy visit https://www.commbank.com.au/support/privacy