Penetration Tester

XPT Software; Brisbane; Vor Ort; AUD 120.000 - 180.000; Vollzeit

Zusammenfassung

XPT SoftwareAustralia PTY Ltd in Brisbane seeks a Security Testing Lead Specialist with 8+ years' experience to drive high-complexity assessments across customer systems, including advanced penetration testing, vulnerability assessments, and secure code reviews.

You will provide technical leadership as a subject matter expert, translate findings into business risk insights, and shape security testing strategy and standards for ongoing improvement.

Qualifikationen

• Lead and deliver high-complexity security assessments across customer systems.
• Authoritative technical leadership as security testing SME.
• Translate technical findings into business risk insights.

Aufgaben

• Evaluate effectiveness of security controls and recommend improvements.
• Develop and evolve security testing strategy and standards.
• Mentor senior and junior team members in security testing.

Kenntnisse

Security testing

Penetration testing

Vulnerability assessments

Source code security reviews

Risk assessment

Security leadership

Threat modeling

Adversary emulation

Jobbeschreibung

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  
• We have 120+technocrats in Australia working at our clientlocations.
  
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  

JD – Security Testing -Lead Specialist:

Minimum of 8 years’experience in a Security Testing role

MustHave:

Leadand deliver high-complexity, high-assurance security assessments across Customer’s systems, including advanced penetration testing, vulnerability assessments, and source code security reviews, focusing on real-world exploitability and attack path development.

Provideauthoritative technical leadership as a subject matter expert in securitytesting and secure development, acting as the primary escalation point for complex vulnerabilities, assessments, and adversary emulation activities.

Evaluatethe effectiveness of systems in protecting organisational data and maintaining intended functionality, and provide strategic recommendations to improve security posture and resilience.

Identifyand validate critical vulnerabilities, exploit paths, and attack vectors, including analysing scan outputs and manual testing results to assess risk and impact accurately.

Translatetechnical findings into clear, actionable business risk insights, supporting informed decision-making and prioritised remediation.

Drivethe evolution of security testing strategy, methodologies, and standards, ensuring alignment with industry best practices and continuous improvement across the function.

Collaboratewith the Security Testing – Senior Lead and broader cyber security teams to shape capability development, resourcing, and operational direction.

Assessexisting security controls and practices against expected standards, and recommend improvements to address gaps and uplift security maturity.

Ensuredelivery of high-quality security assessment reports, clearly articulating risks, impacts, and recommended mitigations.

Providementorship and technical guidance to uplift capability across both senior and junior team members.

Applya pragmatic, risk-based approach to all activities, balancing securityrequirements with business objectives, timelines, and operational constraints.

FulfilHealth, Safety, and Environment responsibilities in accordance with organisational policies and regulatory requirements.

Additionalinformation:

Providetechnical leadership across the domain, including performing and leading complex assessments across multiple technical domains, and responding to escalated incidents and engagements.

Provideinput into Customer’s Penetration Testing, Vulnerability Assessment and Secure Code processes, methodologies, standards, and corresponding roadmaps and enhancement plans.

Developand deliver training for junior team members and the broader Customercommunity to uplift security capability.

Promote“shift-left” practices to enable the delivery of secure, high-quality code atspeed.

Provideguidance on application security architecture and secure design considerations.

Developscripts and contribute to automation initiatives to improve the efficiency and effectiveness of security testing activities.

Refineand define engagement processes, secure code artefacts, security criteria, and use cases.

Collaboratewith third parties, including vendors and newly acquired entities, to assessand uplift their security and development practices.

Conductquality assurance reviews of deliverables produced within the Secure Codeteam to ensure high technical standards.

Operateeffectively in environments with ambiguous or conflicting requirements, consistently delivering high-quality outcomes aligned with Cyber Security expectations

Translatetechnical vulnerabilities into business risk for stakeholders in a timely manner, leveraging insights from the broader Cyber Security function.

Applya pragmatic approach to security testing, balancing business objectives, standards alignment, cost, time, and risk considerations.

Currentindustry certification, including but not limited to:

OffensiveSecurity – OSCP, OSCE3, OSWE