Security Testing

About this role

K&K Global Talents is an international recruiting agency that has been providing technical resources globally since 1993. This position is with one of our clients in *Australia*who is actively hiring candidates to expand their teams.

Title : Security Testing

Employment Type: Full-time Permanent

Job Description

• A minimum of 8 years’ experience in a Security Testing role
• Experience and exposure to a variety of software delivery models, including DevOps and Waterfall
• Significant experience in performing complex security assessments across a range of domain areas in a large corporate environment
• Significant experience in implementing automated security assessment tools into CI/CD pipelines
• Exceptional working knowledge of Security Assessment toolsets, such as Vulnerability Scanners, Static Code Analysis and Software Composition Analysis tools.
• Ability to review and provide guidance and feedback on security assessment reports
• Strong understanding of application security architecture principles including transport security, authentication, authorization, threat modelling, and logging and monitoring.
• Experience in training and developing people
• Tertiary qualifications in Electrical/Electronic, Computer, Network or Software Engineering; Information/Cyber Security; IT or a related discipline
• Demonstratable skillset exceeding that expected of a person holding OSCE/OSWE or CREST – Certified qualifications for domain areas in scope for the position.

High desirable

• Prior experience as a developer / software engineer is a significant advantage.
• Experience in developing security policy, standards, and development guidelines
• Significant experience in other domain areas of Cyber Security
• A strong understanding of adjacent security dependencies including endpoints, application platforms, databases, network security technologies, development frameworks.
• Current industry certification, including but not limited to:
• Offensive Security – OSCP, OSCE3, OSWE
• CREST – Certified Level qualifications (CCT, CCSC, CCSAS, CCSAM)
• SANS – GPEN, GAWN, GWAPT, GXPN.
• (ISC)² – CISSP, CCSP
• Experience in managing engagements with external security vendors
• Demonstrable history of developing exploits and zero-day discovery

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.