Security Testing

K&K Global Talents is an international recruiting agency that has been providing technical resources globally since 1993. This position is with one of our clients in Australia who is actively hiring candidates to expand their teams.

Title : Security Testing

Location: Melbourne , Sydney (Australia)

Employment Type: Full-time Permanent

Job Description:

• A minimum of 8 years’ experience in a Security Testing role
• Experience and exposure to a variety of software delivery models, including DevOps and Waterfall
• Significant experience in performing complex security assessments across a range of domain areas in a large corporate environment
• Significant experience in implementing automated security assessment tools into CI/CD pipelines
• Exceptional working knowledge of Security Assessment toolsets, such as Vulnerability Scanners, Static Code Analysis and Software Composition Analysis tools.
• Ability to review and provide guidance and feedback on security assessment reports
• Strong understanding of application security architecture principles including transport security, authentication, authorization, threat modelling, and logging and monitoring.
• Experience in training and developing people
• Tertiary qualifications in Electrical/Electronic, Computer, Network or Software Engineering; Information/Cyber Security; IT or a related discipline
• Demonstratable skillset exceeding that expected of a person holding OSCE/OSWE or CREST – Certified qualifications for domain areas in scope for the position.

High desirable

• Prior experience as a developer / software engineer is a significant advantage.
• Experience in developing security policy, standards, and development guidelines
• Significant experience in other domain areas of Cyber Security
• A strong understanding of adjacent security dependencies including endpoints, application platforms, databases, network security technologies, development frameworks.
• Current industry certification, including but not limited to:
• Offensive Security – OSCP, OSCE3, OSWE
• CREST – Certified Level qualifications (CCT, CCSC, CCSAS, CCSAM)
• SANS – GPEN, GAWN, GWAPT, GXPN.
• (ISC)² – CISSP, CCSP
• Experience in managing engagements with external security vendors
• Demonstrable history of developing exploits and zero-day discovery