NHMRC Penetration Testing
Job Location:
Monthly Salary:
Experience Required:
Posted on:
Vacancies:
Job Summary
Indigitise is seeking an experienced Penetration Testing Specialist to support the National Health and Medical Research Council (NHMRC) in conducting a targeted penetration testing exercise across its external infrastructure cloud environment network and Wi-Fi.
The engagement will assess the effectiveness of existing cyber controls identify vulnerabilities and test the organisations resilience against realistic external attack scenarios.
Key responsibilities:
- Identify and map the external attack surface.
- Conduct external infrastructure and asset discovery.
- Perform grey-box penetration testing.
- Assess internet-facing firewalls and network infrastructure.
- Test Azure cloud tenancies and Microsoft 365 exposure.
- Assess Wi-Fi security from an adjacent attacker perspective onsite.
- Test lateral movement scenarios.
- Assess the potential compromise of a standard Azure Virtual Desktop session or Microsoft 365 credentials.
- Identify vulnerabilities attack paths and control weaknesses.
- Provide clear findings and remediation recommendations.
Technology environment: Azure Microsoft 365 Zscaler Aruba Central and Azure Virtual Desktop (VDI).
Out of scope: Social engineering and third-party systems.
Essential Criteria
Candidates must demonstrate:
- Strong experience delivering penetration testing and ethical hacking engagements.
- Experience assessing external-facing infrastructure firewalls and networks.
- Strong Azure cloud security and penetration testing capability.
- Experience assessing Microsoft 365 environments.
- Experience conducting Wi-Fi and network penetration testing.
- Ability to test lateral movement and credential compromise scenarios.
- Experience with attack surface discovery and grey-box testing.
- Ability to clearly document vulnerabilities risks and remediation recommendations.
- Availability to work onsite in the ACT during business hours.
- Strong overall value for money and suitability for the engagement.
My recommendation: dont advertise this as a generic Penetration Tester. Use Senior Penetration Testing Specialist Azure M365 & Network. That title will produce much better candidate matching in Zoho and Juicebox.
Required Skills:
Responsible for collecting and evaluating data to comprehend business requirements and procedures and pinpoint opportunities for enhancement. Working with stakeholders the Business Analyst will compile user needs record discoveries and create user stories to develop digital services. Experience working with stakeholders to develop user requirements to support delivery in a multi-disciplinary team. Key responsibilities: Engaging with our internal and external users business areas to understand and capture user and business needs and identify opportunities (short and/or long-term transformation) for the future state. Work closely with solution architects to design solution that fit within the architecture standards for the program and how the design might contribute to the future state. Supporting user engagement throughout the different phases of Discovery Alpha Beta and Live; including the provision of ongoing business and technical advice. Convert the conceptual/theoretical model of a service/product into technically sound product features. Develop artefacts and diagrams to define and document user needs and system concepts and functionality Write user stories/PBIs for development maintain alignment with features dependencies within stories; help guide the sequence of development and acceptance testing of the implemented PBIs. Develop content for business consumption translating technical solutions/features in to simple effective manner suitable for wider business consumption Communicating future system requirements to software developers and assisting in system design. Collaborate with service designers and stakeholders to form the bigger strategic picture. Skills & Experience Extensive experience in business analysis for large scale transformations Demonstrable experience in solving complex problems based on evidence analysis and investigation Strong track record working in agile and multi-disciplinary teams Human Centred Design approach to service delivery The ability to communicate effectively with technical and non-technical audiences Influencing and guiding decisions with senior stakeholders Excellent knowledge and experience in creating quality visual materials Collaborative team player Excellent communicator in both written and verbal form. Ability to adapt and learn how to use a variety of systems.
About Company
35 employees
Indigitise is a leading professional services enterprise with a strong presence across Australia, specializing in IT consulting, IT services, and digital transformation solutions. Our team has extensive experience providing innovative and effective IT solutions to the Commonwealth Gov ... View more
