Security Consultant

Security Consultant - Penetration Testing

Join us as a Security Consultant and work on leading PenTesting work in Queensland.

Overview

The successful candidate will be confident completing WebApp PenTests end-to-end, including writing the report.

Responsibilities

- Conduct security tests on customer information systems, web apps, infrastructure, software, and networks.

- Provide robust and considered remediation advice that addresses security weaknesses and improves security posture.

- Develop metrics to enable customers to make informed decisions about the posture of their environment.

- Deliver on security testing engagements, grow consultancy skills, progress technical skillset, and positively contribute to the team culture.

Skills and experience

- Working knowledge of web application and network security, with hands-on experience in manual testing techniques and the use (and limitations) of automated scanners.

- Effective stakeholder engagement and communication skills.

- Strong analytical and problem-solving skills.

- Knowledge of various operating systems and networks, especially Linux, Windows, and Active Directory.

- Related certifications such as OSCP, CREST CCT (Applications or Infrastructure), SANS, or equivalent; apply even if you are still working towards any of these.

- Minimum of two years as a security testing/cyber practitioner with experience in client management, time management, technical testing, and report writing.

About the team and opportunities

Unimagined opportunity with our Security Testing & Assurance team. You’ll access a wide range of customers and work on unique projects, alongside industry leaders. We also test hardware (e.g., ATMs, medical devices, satellites, and various operational technologies) and conduct social engineering, red teaming, and physical penetration testing. We contribute to our craft through events and internal conferences and support participation in local meetups and conferences.

The work we do matters. We protect and defend our customers and communities by providing the widest range of cyber security professional services in the region. With more than 1,400 team members across Australia, New Zealand, the UK, and the US, we are a leading force in cyber security, offering services from strategy, GRC, managed security services, cloud security, digital forensics, and cyber education.

Qualifications and requirements

Note: This role requires full working rights in Australia (no current or future sponsorship).

A minimum of two years as a security testing/cyber practitioner in which you have developed capability in managing client expectations, time, technical security testing, and report writing.

- Working knowledge of web application and network security, with hands-on experience in manual testing techniques and the use of automated scanners (and awareness of their limitations).

- Effective stakeholder engagement and communication skills.

- Strong analytical and problem-solving abilities.

- Knowledge of Linux, Windows, and Active Directory environments.

- Relevant certifications such as OSCP, CREST CCT (Applications or Infrastructure), SANS, or equivalent (consider applying even if you’re still working toward these).

Be yourself. We embrace diverse perspectives, experiences, and backgrounds. Please let us know if you require additional support or adjustments to assist with your recruitment experience.

We take security seriously. We require all employees to complete background checks (including police and global sanction list checks) annually.

Apply for this role through our approved process.

#J-18808-Ljbffr