Senior Penetration Testing Lead - Cloud & Risk

Department of Health; Melbourne; On-site; AUD 180,000 - 220,000; Full time

Job summary

The Victorian Department of Health is seeking a Principal Cyber Security Pen Tester to lead penetration testing and vulnerability assessments across cloud environments. You will produce risk reports with actionable recommendations and coordinate remediation across multiple teams.

Qualifications include CEH/OSCP with a tertiary ICT/InfoSec degree and hands-on tools such as Burp Suite, Metasploit, Nessus, Nmap and Kali Linux. Experience with Azure/AWS and ASD ISM standards is preferred.

Qualifications

• Experience in penetration testing and vulnerability assessments across complex cloud environments.
• Proven ability to analyze cyber security risks and report with actionable mitigations.
• Hands-on proficiency with industry-standard pentest tools and methodologies.

Responsibilities

• Conduct penetration testing and vulnerability assessments in collaboration with the Manager, Enterprise Cybersecurity Operations.
• Lead the development and ongoing management of penetration testing and vulnerability assessment activities.
• Produce cyber security risk reports outlining findings and actionable recommendations from pen-testing and vulnerability assessment.
• Assist in the implementation of technical risk treatments across systems and environments.
• Regularly review and assess the effectiveness of penetration testing tools and services.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Cloud security

Risk analysis

Secure coding practices

System hardening

Stakeholder coordination

Education

Tertiary qualification in ICT/Information Security

CEH

OSCP

Tools

Burp Suite

Metasploit

Nessus

Nmap

Kali Linux

Azure

AWS

Job description

The Victorian Department of Health is seeking a Principal Cyber Security Pen Tester to lead penetration testing and vulnerability assessments across cloud environments. You will produce risk reports with actionable recommendations and coordinate remediation across multiple teams.

Qualifications include CEH/OSCP with a tertiary ICT/InfoSec degree and hands-on tools such as Burp Suite, Metasploit, Nessus, Nmap and Kali Linux. Experience with Azure/AWS and ASD ISM standards is preferred.