Lead Cyber Security Penetration Testers | Services Australia | ACT, VIC, SA, QLD

Remote; Canberra; Sur place; AUD 140 000 - 200 000; Plein temps

Résumé du poste

Services Australia is seeking a Lead Cyber Security Penetration Tester to direct complex and sensitive testing across web apps, mobile platforms, and enterprise infrastructure. You will oversee testing plans, methodologies, and reporting, providing technical guidance to system owners and stakeholders to ensure remediation of identified vulnerabilities.

The role requires leadership of a team, coordination of priorities, and coaching to develop staff capability while adhering to legislation and

Qualifications

• Forensics: Level 4 (CIISEC) – basic forensic tasks under supervision.
• Penetration testing and simulated attack exercises at advanced level with capable tools.
• Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.

Responsabilités

• Oversee execution of test cases with deep risk analysis.
• Lead cyber penetration testing and vulnerability assessments using relevant tools.
• Conduct threat simulation activities to identify weaknesses in security controls.
• Review test findings and recommended mitigations with stakeholders.
• Manage test plans, priorities and resources for the team.
• Coach staff and transfer knowledge to build capability.

Connaissances

Forensics level 4

Penetration testing

Simulated attacks

Outils

CHECK Team Leader

CREST Certified Tester

OSCE3

CompTIA PenTest+

GIAC Penetration Tester

Description du poste

Lead Cyber Security Penetration Testers | Services Australia | ACT, VIC, SA, QLD

As a Lead Cyber Security Penetration Tester within Services Australia, you will direct complex and highly sensitive penetration testing, vulnerability assessment and threat simulation activities across web applications, mobile platforms and enterprise infrastructure. You will oversee testing plans, methodologies, execution and reporting; provide highly technical advice to system owners and stakeholders; and confirm that identified vulnerabilities have been effectively remediated. You will also manage team priorities, resources and workflows while developing staff capability through coaching and knowledge transfer.

Key Responsibilities

Oversee the execution of test cases using in-depth technical analysis of risks and typical vulnerabilities.

Lead cyber penetration testing and vulnerability assessments using relevant tools and methods against a variety of technologies.

conduct and lead complex threat simulation activities to identify weaknesses and/or opportunities in technical security controls.

Oversee the catalogue of test findings and potential measures.

Oversee and approve security testing plans.

Provide highly technical subject matter expertise to system owners and stakeholders to improve system security posture.

Conduct highly complex analysis and research to identify improvements to cyber threat tools, techniques and procedures.

Manage and coordinate a variety of risk analysis and assessments on cyber security matters.

Perform web application and mobile penetration testing against complex enterprise platforms using a variety of technologies.

Conduct infrastructure penetration testing against enterprise grade systems.

Collaborate with system owners to develop test scope and preparation for testing ensuring remediation has been completed effectively.

Review reports, briefs and documentation and communicate technical findings and recommendations.

Transfer highly technical skills and knowledge to other staff through continuous coaching and on-the-job training to support succession planning.

Lead and support the operations of a team, including setting priorities and managing performance, resources and workflows.

Exercise delegations in line with legislation and guidelines.

About you

• Forensics: Level 4 (CIISEC) - Undertakes basic forensic tasks (e.g. first responder) without supervision. Has some experience of more complex tasks (e.g. using specialist tools to recover, preserve and analyse data) under supervision.


• Penetration Testing and conducting Simulated Attack Exercises: Level 5 (CIISEC) - Uses commercial and bespoke tools to conduct complex penetration testing without close supervision and/or leads teams undertaking complex penetration tests. Undertakes penetration exploits as part of a simulated attack exercise under direction. Appropriate and relevant certifications include CHECK Team Leader, CREST Certified Tester (Infrastructure or Web Applications) or equivalents.


• Current NV1 Australian Government security clearance required.

Desirable skills and qualifications:

Experience in:

• conducting web application penetration testing against complex enterprise platforms built with a variety of technologies.


• undertaking penetration testing against enterprise grade, infrastructure hosted on both Windows and Linux based platforms.


• CompTIA Security +, CompTIA PenTest +, Certified Ethical Hacker, CREST Registered Penetration Tester, Offensive Security Certified (OSCE3), GIAC Penetration Tester

About us

Remote is a partner of choice for the Commonwealth's labour hire and professional services requirements, specialising in contracting for the National Intelligence Community. Our team is led by industry professionals who have worked both within government and as contractors.