Senior Test Analyst

SENIOR TEST ANALYST – We are seeking a highly skilled Senior Test Analyst specialising in security testing. You will safeguard our applications by meticulously validating security patches, ensuring effective vulnerability remediation without introducing new weaknesses. This role involves designing, developing, and executing comprehensive tests, contributing to our Group Test Strategy and uplifting team capabilities.

You will join our established Test Team within the Technology, Space & Distribution division. This collaborative environment supports continuous improvement, where you'll contribute to our Testing Community of Practice, mentor junior analysts, and work closely with cross-functional teams to deliver high-quality, secure products.

• Meticulously test and validate security patches, ensuring full remediation of vulnerabilities without impacting functionality.
• Conduct comprehensive regression testing to ensure security enhancements do not negatively affect existing application functionality.
• Design, develop, and execute tests for new products, services, and enhancements, adhering to the Group Test Strategy.
• Identify, exploit, and report authentication and authorisation flaws, including manipulating bearer tokens and Broken Object Level Authorisation.
• Clearly document testing methodologies, findings, and provide actionable recommendations for discovered issues.
• Collaborate closely with Developers and Development Teams to understand vulnerabilities and implemented fixes.
• Contribute to the Testing Community of Practice, providing input on techniques, processes, and guidelines.
• Mentor and guide junior Test Analysts through pairing and peer reviews.
• Actively participate in Agile ceremonies and contribute to test planning, design, and risk identification.
• Provide out-of-hours support during production testing when required.

• Minimum 5 years of experience as a Test Analyst, with a strong focus on security testing.
• Demonstrable hands-on experience in identifying and exploiting authentication and authorisation flaws (e.g., manipulating bearer tokens, Broken Object Level Authorisation).
• Deep familiarity with RESTful API principles and the ability to test for vulnerabilities across all CRUD operations.
• Proficiency in a scripting language (e.g., Python, Bash) for automating repetitive tasks and security testing scenarios across API endpoints.
• A degree in Information Technology or a related field, or equivalent practical experience.
• ISTQB Certification is essential.
• Strong understanding of software development methodologies, including Agile/Scrum and continuous delivery.
• Demonstrated experience in creating comprehensive test plans, traceability matrices, and test reports.
• Proven ability to work independently, proactively identify security weaknesses, and take high ownership of tasks.
• Excellent communication skills, with the ability to articulate complex technical issues to both technical and non-technical stakeholders.
• Experience in coaching, mentoring, and uplifting the capabilities of junior Test Analysts.
• Eagerness for continuous learning of new technologies and security testing techniques.

• Hybrid Work: Work from home 2 days a week, with offices in Toowong, North Lakes, Kawana (QLD), or Docklands (Melbourne).
• Extra Leave: Paid 'ME' day, a paid volunteer day, and the option to purchase additional leave.
• Development Opportunities: Access to internal programmes and online courses.
• Employee Discounts: Discounts on Budget Direct insurance products.
• Reward and Recognition: Recognitions, rewards, and incentives for high performance.
• Onsite Facilities: End-of-trip facilities and private spaces for nursing mothers (available at specific office locations).
• Get Social: Participation in vibrant social and community activities, including annual celebrations.

Auto & General (A&G) is the fastest-growing major Motor and Home insurer in Australia, providing insurance products and solutions to safeguard a brighter future for our customers and community. Our range of general insurance products including Car, Motorcycle, Home, Contents, Pet and Travel products are delivered through our multi-award-winning brand Budget Direct and partnerships with leading brands - ING, Qantas, Virgin Money and Coles Insurance. We're excited about the future and we're always on the lookout for talented, passionate individuals who can help us achieve our goal of being Australia's best insurer. If this sounds like you, apply today.

Auto & General values individual differences and believes in fostering an inclusive culture that creates a great place to work for all. If you're ready to make a significant impact and thrive in a growing business, apply now Auto & General is committed to fostering an inclusive and diverse workplace where everyone can succeed.

Note: Recruitment agencies are kindly asked to refrain from sending unsolicited resumes. Auto & General is not responsible for any fees related to unsolicited resumes.