Penetration Tester

Penetration Tester

Location: ACT, SA, VIC
Initial Contract Duration: Until EOFY
Extension Term: 12 months
Security Clearance: NV1 required

About the Role:

Cleared Recruitment is seeking highly skilled Penetration Testers to join a large defence organisation in providing security assurance for critical systems within the organisation. You will be instrumental in conducting penetration testing across a variety of systems, delivering insights and security posture audit capability development, ensuring compliance with key Australian Government policies. This is a dynamic opportunity to work on a broad range of systems within an Innovation, Science, and Technology (IS&T) environment.

You will conduct at least six separate penetration tests of varying complexity during this engagement, ensuring systems' security and resilience. You'll also contribute to the enhancement of penetration testing processes and artefacts.

Key Responsibilities:

• Conduct penetration tests across multiple systems, ensuring the security posture is robust.
• Adapt and develop existing penetration testing approval processes in line with Defence, and Australian Government policies (ISM, DSPF).
• Deliver security posture audit capability development and execution on key systems.
• Potential inputs into emanation security related assessments.
• Provide detailed reports and recommendations to improve system security based on test findings.

Essential Criteria:

1. Certification: Hold a recognised penetration testing certification such as OSCP, GXPN, or equivalent.
2. Experience: Extensive hands-on experience in penetration testing, particularly in areas including:
   • WAN and LAN networking
   • Gateways
   • Windows and Linux environments
   • Emanation/emission security
   • Custom hardware/software platforms
3. Process Development: Demonstrated experience creating and maturing penetration testing processes, particularly within a research or IS&T context.
4. Policy Familiarity: Strong understanding of Australian Government and Defence cybersecurity frameworks, including the ISM (Information Security Manual) and DSPF (Defence Security Principles Framework).

Desirable Criteria:

1. Defence/Government Experience: Experience planning, conducting, and reporting on penetration tests within Defence or other Australian Government departments is highly desirable.

How to Apply: If you are an experienced penetration tester with relevant certifications and meet the criteria outlined above, we encourage you to apply. Submit your application along with your CV and cover letter outlining your relevant experience.

Application Deadline: 26th September 2024

Join us in securing Australia's critical systems. Apply now!