Cyber Security Assurance Testing Lead

Salary: $160,000 – $200,000 per year

Join a mature, modern cyber security function where technical expertise is valued, the team is well established, and there is a genuine focus on flexibility, balance and doing good-quality security work.

We are partnering with a large, complex Australian organisation to appoint a Cyber Security Assurance Testing Lead into its Cyber Security Controls Assurance team.

This is a hands-on technical security role focused on penetration testing, vulnerability management, application security and controls assurance across a substantial technology environment. You’ll help ensure higher-risk applications, systems and services are regularly tested, vulnerabilities are properly understood, and remediation is driven through to completion.

What you'll be doing

• Conduct and coordinate penetration testing, vulnerability assessments, web application, API and dynamic application security testing

• Review, validate and triage findings from security testing and vulnerability scanning

• Support annual penetration testing and red team exercises

• Work with technology and business stakeholders to understand, communicate and remediate security risks

• Contribute to continuous controls assurance, automation and security control uplift

• Help improve reporting, metrics and visibility across the security assurance capability

What we're looking for

You’ll ideally bring a strong technical cyber security background with experience across penetration testing, vulnerability management and application security.

Exposure to areas such as Tenable, Checkmarx, Pentera, cloud security tooling, AWS, Azure or Microsoft 365 would be valuable, while scripting capability across Python, PowerShell or Bash would also be advantageous.

You don't need to come in knowing everything. We are particularly interested in people who are technically curious, can work across different types of security testing, and are comfortable explaining technical findings to stakeholders outside cyber.

Why consider it?

This is a particularly attractive environment for someone who wants to do meaningful technical cyber work without sacrificing work-life balance.

You'll be joining a mature and modern cyber function, working alongside experienced security professionals in an organisation that takes cyber seriously.

There is good scope to develop your technical capability, work across a broad technology estate and contribute to how the assurance function continues to evolve.

Flexible working is genuinely supported, and the culture suits people who want challenging work alongside a sustainable working environment.

If you're currently working in penetration testing, vulnerability management, application security or security assurance and would like to hear more, apply or get in touch for a confidential conversation.