Security Tester

CareCone Group; City of Melbourne; On-site; AUD 100,000 - 130,000; Full time

Job summary

CareCone Group is looking for an experienced Security Tester in Melbourne, Australia. The ideal candidate will possess strong expertise in Identity and Access Management (IAM) and be responsible for validating security requirements across enterprise applications.

This role requires collaboration with various teams to ensure effective security testing and validation of identity governance and access controls. Candidates should have over 7 years of experience in software testing or security testing with proficiency in IAM tools like SailPoint, Okta, and Burp Suite.

Qualifications

• 7+ years of experience in software testing or security testing.
• Strong experience in IAM/IDAM testing.
• Proficiency with Role-Based Access Control (RBAC) and Knowledge of OWASP Top 10.

Responsibilities

• Develop and execute security, functional, integration, and regression test cases for the IAM solution.
• Validate user provisioning, de-provisioning, access requests, approvals, and role management processes.
• Identify security vulnerabilities, control weaknesses, and access-related risks.

Skills

SailPoint IdentityIQ

Identity & Access Management (IAM)

Single Sign-On (SSO)

Security Testing

Agile Methodologies

Tools

Postman

Burp Suite

OWASP ZAP

Job description

Job Description

We are seeking an experienced Security Tester with strong expertise in Identity and Access Management (IAM/IDAM) and security testing. The ideal candidate will be responsible for validating identity governance, access controls, authentication mechanisms, and security requirements across enterprise applications and IAM platforms such as SailPoint.

Key Responsibilities

• Develop and execute security, functional, integration, and regression test cases for the IAM solution.
• Validate user provisioning, de‑provisioning, access requests, approvals, and role management processes.
• Test authentication and authorization mechanisms including SSO, MFA, and RBA.
• Perform security testing of applications, APIs, and IAM workflow.
• Identify security vulnerabilities, control weaknesses, and access‑related risks.
• Validate integrations between IAM platforms and enterprise systems such as Active Directory, Azure AD, LDAP, HR systems, and business applications.
• Execute API testing using Postman, Swagger, or similar tools.
• Collaborate with Security, Development, Business, and Infrastructure teams to resolve defects and security findings.
• Support test planning, estimation, defect management, and release activities.

Required Skills & Experience

• 7+ years of experience in software testing or security testing.
• Strong experience in IAM/IDAM testing.
• Experience with SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), Okta, Saviynt, CyberArk, NetIQ, or similar IAM tools.
• Knowledge of Identity & Access Management (IAM).
• Experience in User Lifecycle Management.
• Proficiency with Role-Based Access Control (RBAC).
• Experience in Access Governance & Certification.
• Experience with Single Sign-On (SSO).
• Experience performing security testing and vulnerability validation.
• Knowledge of OWASP Top 10 and API security testing.
• Experience with Postman, Swagger, Burp Suite, or OWASP ZAP.
• Strong SQL and defect management skills.
• Experience working in Agile delivery environments.