Senior Security Consultant

Position Summary & Primary ObjectivesReporting to the Managing Security Consultant – STAor Team Lead – STA, the Senior Security Consultant – STA is responsible for carrying out penetration testing and technical security assessments against complex environments and providing security expertise to CyberCX clients.The Senior Security Consultant – STA contributes to pre-sales by undertaking scoping activities, and support less experienced members of STA.
Key Roles & ResponsibilitiesDeliver application, network, systems, and infrastructure penetration tests for customers, specifically those with large or complex testing requirements.
Perform the top five and emerging STA services offered by the Practice to a high standard, as well as most of the other services in the services cataloguePrepare high quality reports detailing security issues, making recommendations, and identifying solutionsBuild and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customersEngage with Customer Sales and Customer Solutions team in a pre-sales capacity to assist with scoping, costing, proposals, RFQs and tendersLead discussions with customers including kick-off meetings, regular updates, and present back on testing performed, key results, recommendations, and the next stepsEnsure that KPIs around client expectation management, delivery deadlines, quality of work and deliverables etc are met, including conducting quality managementShare knowledge with, coach and mentor others in STA to enable learning, development, and capability uplift and to build a high performing teamCreate a culture of empowerment, collaboration, and accountability through consistent employee engagementAssist with R&D, innovation, and practice improvement activities, ensuring R&D and innovation are at the centre of what we doPreferred Qualifications, Experience & SkillsTertiary qualification in information systems, software development or a similar field, or equivalent industry experiencePenetration testing certifications such as SANS, OSCP, CREST CCT (Applications or Infrastructure) or other (preferred but not essential)A minimum of 4 years as a security testing practitioner / cyber practitionerStrong stakeholder engagement and communication skillsStrong analytical and problem-solving skills, and the ability to build sustainable, scalable solutions and processes to meet complex operational problemsSkilled in responding to setbacks in an agile and resilient mannerPersonal AttributesProfessional and ethical, you inspire trust and confidence through integrity and respectCustomer-obsessed and a self-starter, you go above and beyond to deliver extraordinary results and experiences for customersInnovative and open to change, you are focused on finding opportunities for continuous improvement and ways to optimise work processesCollaborative and with an enterprise mindset, you speak up and welcome all input, opinions, and questionsEmotionally intelligent, you demonstrate empathy, connection, and assertivenessAbout CyberCXCyberCX is the leading independent cyber security services organisation in Australia and New Zealand.
CyberCX is Australia's greatest force of cyber security professionals.CyberCX has united the country's most trusted cyber security companies to deliver the most comprehensive end to end cyber security services offering to Australian enterprises and governments.We are cyber security experts first and foremost.
We're a unified team of highly qualified, certified and skilled professionals working together on the same mission: to protect and defend Australian organisations from cyber threats.We specialise in: Strategy & Consulting | Governance, Risk & Compliance | Security Testing & Assurance | Identity & Access Management | Security Integration & Engineering | Managed Security Services | Digital Forensics & Incident Response | Cyber Capability, Education & Training