Principal Cyber Security Pen Tester, Strategy, Delivery and Cybersecurity
Principal penetration tester at the Victorian Department of Health: leads penetration testing and vulnerability assessments, produces security risk reports with remediation recommendations, and helps deploy security controls across cloud platforms. Core toolkit includes Burp Suite, Metasploit, Nessus, Nmap and Kali Linux, with Azure/AWS cloud security knowledge.
- Compensation
- Not disclosed
- Location
- Melbourne CBD, Melbourne
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- Not specified
- Category
- Qa
- Posted
Skills
Must have
- Proven experience in penetration testing, ethical hacking, and vulnerability assessments across complex and cloud-based environments
- Demonstrated experience in cyber security risk analysis and reporting, including mitigation recommendations
- Proficiency with pen testing and vulnerability assessment tools (Burp Suite, Metasploit, Nessus, Nmap, Kali Linux)
- Strong understanding of cloud security (Microsoft Azure, AWS), secure coding practices, and system hardening
- Familiarity with ISO 27001, NIST, OWASP Top 10, ASD ISM, and the Essential Eight
- Experience coordinating remediation efforts and advising on technical risk treatments across teams
- Completed CEH (Certified Ethical Hacker) and/or OSCP certification
Nice to have
- Tertiary qualification relevant to ICT, Information Security, or similar
Full description
About the role: The Principal Cyber Security – Penetration Testing role will be responsible for conducting penetration testing and vulnerability assessments, in collaboration with the Manager, Enterprise Cybersecurity Operations. The role will lead the development and management of penetration testing and vulnerability assessment activities, including the production of cyber security risk reports with findings and recommendations. The role will assist in the implementation of technical risk tre…