Senior/ Mid Security Engineer, Pen Test

1. Working with a diverse range of colleagues to define security testing activities (scope) across target applications and infrastructure
2. Continuous improvement and best practices to promote continuous improvement of penetration testing methodologies and processes
3. Delivery of technical reports and documentation
4. Communication of security vulnerabilities and exposures to internal stakeholders
5. Performing penetration testing and vulnerability assessments, including the triage of findings to determine key exposures. Expanding upon this responsibility, you will also be required to perform:

• Tests against various technical assets (applications, networks), as expanded upon below:
  • Physical Security Assessments
  • Security Audits
  • Analyse Security Policies
  • Write Security Assessment Reports

1. Extensive experience as a penetration tester or security analyst, with experience in large organisations.
2. Extensive experience penetration testing various assets, including but not limited to; web applications, mobile applications, networks/infrastructure, and cloud services. You should highlight any key strengths across these disciplines.
3. A clear understanding of both manual and automated penetration testing techniques, including knowledge of common penetration testing tools and the impacts they have on systems.
4. Fluent understanding of cloud technologies (AWS, Azure), Linux and Windows OSes, and mobile technologies
5. A comprehensive understanding of Penetration Testing frameworks and methodologies (OWASP, OSSTTMM, WAHH).
6. Advanced problem-solving skills
7. Excellent written and verbal communication skills - with experience writing and conveying complex penetration testing findings and their associated risks through reports to stakeholders; findings writeups, or verbal discussions.
8. Ability to attend to the detail on multiple concurrent tasks while meeting various deadlines.
9. Industry certifications such as OSCP, CREST (CRT, CCT), or equivalent are highly desired
10. Training on self-development platforms (i.e. HackTheBox, Pentesterlabs, wechall, etc.)

LANGUAGES:

English: Above Intermediate level in both writing & communication

QUALIFICATIONS:

Bachelor's Degree, Post Graduate Diploma in Cybersecurity, Computer science, IT, or relevant majors.

THE BENEFITS & PERKS

1. Very competitive remuneration package
2. Generous private family healthcare for yourself and two family members
3. A solid team behind you - great people who love what they do
4. The pleasant, enthusiastic, international work environment
5. Opportunity for traveling & training in Australia
6. A brand new & state of the art Agile office
7. Latest technologies, flexible working hours
8. A promising training and career path
9. Fun team activities & outing
10. English learning with native English teachers

CLOUD FIRST

NAB is undergoing an exciting "Cloud First" technology transformation by taking advantage of the latest tools and techniques used by leading technology and digital companies globally. But it's not just about the Tech, we are also investing heavily in our people, so if you have an appetite to learn, grow and elevate others around you, this is the place for you!

IT'S MORE THAN MONEY!

We naturally also provide a very competitive remuneration package but a career with us is about a lot more than money. We believe in people with ideas and dreams, and we want you to achieve your aspirations. We'll work together to deliver exceptional products and outcomes that push the limits of our own aspirations. Our passion for creating value and exceeding our customers' expectations means we're constantly striving to redefine our standards of excellence. You'll have our backing to develop and our encouragement to explore, realize and reach your full potential.

If this excites you, let's have a chat over a cup of coffee!