Cyber Security Services - Penetration Testing and Vulnerability Assessments

Softtest pays pty ltd; Australian Capital Territory; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Softtest pays pty ltd seeks a suitably qualified security tester for NDIA projects in Canberra. The role covers vulnerability assessments, penetration testing and code reviews across cloud and multi-vendor environments, focusing on identifying vulnerabilities and remediation actions.

Contract starts 01 November 2023 for 12 months, with 2 x 12 months extensions. Remote/offsite work in Canberra is acceptable, and occasional face-to-face NDIA Cyber Security meetings are required at Greenway, ACT.

Qualifications

• Experience performing Vulnerability Assessments and Penetration Testing on Salesforce and cloud environments (Azure & AWS).
• Knowledge of ASD Essential 8 controls and Information Security Manual.
• Certified staff in CISSP and/or CISM is preferred.

Responsibilities

• Conduct Vulnerability Assessments, Penetration Testing and Code Review across projects.
• Document findings and provide remediation recommendations.
• Augment the NDIA project team and participate in face-to-face meetings as required.

Skills

CISSP/CISM

Cloud & multi‑vendor experience

ISM familiarity

Security tools usage

ASD Essential 8

Tools

Security testing tools

Job description

Australian Citizens residing in Australia only respond. Contract start 01 November 2023 to 12 months, 2 x 12 months extensions. Australian Citizen, Canberra, Offsite(Occasional face to face meetings will be required) role.

Overview

The services of a suitably qualified and experienced Candidates are required to undertake security testing activities across the portfolio of projects to help understand security vulnerabilities, risks and/or issues, and where appropriate recommend actions to remediate vulnerabilities and mitigate any risks and issues. The NDIA is undertaking a number of projects involving development of critical business systems as well as a cloud-based desktop environment. The successful Candidate will provide a mix of vulnerability assessments, penetration teste and code reviews. The mix of services and detail required will vary with NDIA needs.

Key Deliverables and Acceptance

The services of a suitably qualified and experienced candidates are required to conduct and document a number of Vulnerability Assessments, Penetration Testing and Code Review activities across the portfolio of projects to help understand any unresolved risks or issues, and where appropriate recommend steps to mitigate those risks and issues. The following two deliverables will be required for each assignment: The successful candidates will augment the NDIA project team (comprising NDIA engaged resources and external suppliers); and are expected to be available for face-to-face meetings with the NDIA Cyber Security team located in NDIAs premises at 274 Reed St, Greenway, ACT. Remote work offsite in Canberra would be acceptable. The Candidate must demonstrate appropriate technical capability of their personnel to perform cyber security testing.

• Certified Information Systems Security Professional (CISSP) and/or Security Manager (CISM) accredited staff
• Experience in a complex cloud and multi-vendor environment
• Experience applying the Information Security Manual
• Experience using security tools

Essential Criteria

• 1. Relevant organisational experience undertaking Vulnerability Assessments and Penetration Testing including Salesforce and cloud-based environment (i.e such as Microsoft Azure & Amazon Web Services) 40%
• 2. relevant technical capability (including working knowledge of ASDs Essential 8 controls and the Information Security Manual) and experience in delivering similar services 25%