Buyict Pentration Tester

Initial contract of 3 months with no applicable extensions
- Based in ACT, NSW, Offsite
- Requires NV1 Security clearance

**Who We Are?**

**Security**

**What We Are Looking For**

**BuyICT Penetration Tester**

**Overview**

BuyICT is managed by the Sourcing Platforms team within the Digital Transformation Agency (DTA). It enables Whole of Government digital procurement by hosting DTA managed marketplaces, panels, and single seller arrangements. First time performing penetration testing.

We are seeking a cyber security penetration tester who will assist with the refresh of our Authority to Operate assessment in 2024.

**Requirements of the engagement will be to**:
1. Test Scope - the scope identifies targets and test types based on threat modelling;
2. Test Objectives - the test objectives pinpoint the penetration testers’ targets, determine what type of testing is required and gauge what success looks like.

3. Attack Sources - such as from within, or external to, the Department

4. Test Schedule

5. Test Cases informed by industry guides

6. Rules of Engagement - these rules outline specific activities that are permitted or disallowed during the testing activities.

The Penetration Test Report should include elements such as:
a) Executive summary

b) Scope

c) Constraints and Assumptions

d) Findings - Outcomes (positive or negative), Vulnerabilities and Issues

e) Recommendations

At a high level, the test scope will focus on penetration testing of the BuyICT platform only.

**Work Arrangements**

The BuyICT team work across the east coast of Australia and have an office location in Canberra and Sydney as well as remote. As the BuyICT portal is cloud based, there is no preference to work location for this engagement.

**Contact Us**

**0423 227 550** or
**02 5119 2299