A minimum of 8 years' experience in a Security Testing role

Experience and exposure to a variety of software delivery models, including DevOps and Waterfall

Significant experience in performing complex security assessments across a range of domain areas in a large corporate environment Significant experience in implementing automated security assessment tools into CI/CD pipelines

Exceptional working knowledge of Security Assessment toolsets, such as Vulnerability Scanners, Static Code Analysis and Software Composition Analysis tools.

Ability to review and provide guidance and feedback on security assessment reports Strong understanding of application security architecture principles including transport security, authentication, authorisation, threat modelling, and logging and monitoring.

Experience in training and developing people Tertiary qualifications in Flectrical/Electronic

·





Prior experience as a developer / software engineer is a significant advantage. Experience in developing security policy, standards, and development guidelines Significant experience in other domain areas of Cyber Security A solid understanding of adjacent security dependencies including endpoints, application platforms, databases, network security technologies, development frameworks. Current industry certification, including but not limited to:

。 Offensive Security - OSCP, OSCE3, OSWE

CREST Certified Level qualifications

(CCT, CCSC, CCSAS, CCSAM)

SANS GPEN, GAWN, GWAPT, GXPN.

(ISC)2- CISSP, CCSP

Experience in managing engagements with external security vendors

Demonstrable history of developing exploits Windows and zero-day discoverv

Go to Settings to activate

📌 Security Tester (Sydney)
🏢 BULLIT SYSTEMS
📍 Sydney