Security Analyst Contract Melbourne
Job Location:
Salary:
Experience Required:
Posted:
Application Deadline:
Vacancies:
Job Summary
- Must conduct a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) on Web applications APIs Data Science apps(advantage)
- Conducting manual security testing to complement automated scans.
- Exploit the vulnerabilities after vulnerability scan & Classification of vulnerabilities according to agreed standard (OWASP CVS etc.)
- Reporting of vulnerabilities based on criticality after scanning and exploitation
- The incorporation of automated security testing tools including SAST DAST and SCA into the CI/CD pipeline.
- Assistance to application team in case of any clarification required to fix identified vulnerabilities
- Will provide security inputs and security assessments as feasible for the below activities
- Experience in Manual Pentesting - Web Application API(Minimum Requirements) Data Science apps(advantage)
- Knowledge in Threat Modelling STRIDE Methodology (At least basic knowledge)
- Experience or Knowledge in Architecture review for applications hosted in Google Cloud (At least basic knowledge)
- Tools - BurpSuite Postman Kali Linux/Parrot OS Linux understanding
Required Skills:
Must conduct a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) on Web applications APIs Data Science apps(advantage) Conducting manual security testing to complement automated scans. Exploit the vulnerabilities after vulnerability scan & Classification of vulnerabilities according to agreed standard (OWASP CVS etc.) Reporting of vulnerabilities based on criticality after scanning and exploitation The incorporation of automated security testing tools including SAST DAST and SCA into the CI/CD pipeline. Assistance to application team in case of any clarification required to fix identified vulnerabilities Will provide security inputs and security assessments as feasible for the below activities Experience in Manual Pentesting - Web Application API(Minimum Requirements) Data Science apps(advantage) Knowledge in Threat Modelling STRIDE Methodology (At least basic knowledge) Experience or Knowledge in Architecture review for applications hosted in Google Cloud (At least basic knowledge) Tools - BurpSuite Postman Kali Linux/Parrot OS Linux understanding Duration: 6 Months and possible extension Eligibility: Australian/NZ Citizens/PR Holders only Email:
